The vulnerability of the user_list_backend.php script in the Piwigo content management system allows attackers to carry out SQL injection attacks.

The vulnerability of the userlistbackend.php script in the Piwigo content management system is related to the lack of validation for the consistency of XML objects. Exploiting this vulnerability allows a malicious actor to carry out attacks based on SQL injections...

CVE-2023-28701

ELITE TECHNOLOGY CORP. Web Fax has a vulnerability of SQL Injection. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to perform arbitrary system commands, disrupt service or terminate service...

Xibo SQL注入漏洞

Xibo is an open source content management system from Xibo Digital Signage. A security vulnerability exists in Xibo that stems from an SQL injection vulnerability that allows an authenticated user to steal data by injecting a specially crafted value into the parameter filter...

PT-2023-3090 · Elite Technology · Web Fax

Name of the Vulnerable Software and Affected Versions: ELITE TECHNOLOGY CORP. Web Fax affected versions not specified Description: The issue is related to SQL Injection, where an unauthenticated remote attacker can inject SQL commands into the input field of the "login page" to perform arbitrary...

PT-2023-24462 · Bluecms · Bluecms

Name of the Vulnerable Software and Affected Versions: BlueCMS version 1.6 Description: A SQL injection issue was found in BlueCMS via the keywords parameter at the "search.php" endpoint. Recommendations: For BlueCMS version 1.6, avoid using the keywords parameter in the "search.php" endpoint unt...

CVE-2023-2955

A vulnerability, which was classified as critical, was found in SourceCodester Students Online Internship Timesheet System 1.0. Affected is an unknown function of the file renderedreport.php of the component GET Parameter Handler. The manipulation of the argument sid leads to sql injection. It is...

CVE-2023-2951

A vulnerability classified as critical has been found in code-projects Bus Dispatch and Information System 1.0. Affected is an unknown function of the file deletebus.php. The manipulation of the argument busid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

TYPO3 SQL注入漏洞

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. TYPO3 1.1.7 and earlier versions exist SQL injection vulnerability, the vulnerability stems from a problem in the mod1/index.php file, an attacker can exploit this vulnerability to conduct...

PT-2023-12439 · Itrs · Monitor-Ninja

Name of the Vulnerable Software and Affected Versions: ITRS Group monitor-ninja versions up to 2021.11.1 Description: A critical issue affects some unknown functionality of the file modules/reports/models/scheduled reports.php, leading to sql injection. The estimated number of potentially affecte...

CVE-2023-33278

In the Store Commander scexportcustomers module for PrestaShop through 3.6.1, sensitive SQL calls can be executed with a trivial HTTP request and exploited to forge a blind SQL injection...

PT-2023-24265 · Prestashop +1 · Store Commander Scquickaccounting Module +1

Name of the Vulnerable Software and Affected Versions: Store Commander scquickaccounting module for PrestaShop versions through 3.7.3 Description: The issue allows multiple sensitive SQL calls to be executed with a trivial HTTP request, which can be exploited to forge a blind SQL injection...

PT-2023-24309 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 13.6.0 Description: The issue is related to SQL Injection via the "/admin/permalinks.php" API endpoint. This allows for potential exploitation. No information is provided about the estimated number of potentially affected devic...

bumsys SQL注入漏洞

bumsys is an open source project called Business Management System by unilogies individual developers. A SQL injection vulnerability exists in bumsys versions prior to 2.2.0, which stems from an SQL injection in ajaxdata.php...

CVE-2023-31707

SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 1.5, which originates from the lack of validation of external input SQL statements in AntRponse.php. An attacker can exploit this vulnerability to...

CVE-2023-29985

Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.phpdatefrom has a SQL Injection vulnerability...

CVE-2023-30191

PrestaShop cdesigner 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent...

CVE-2023-2771

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

PT-2023-21312 · Unknown · Code-Projects Bus Dispatch/Information System

Name of the Vulnerable Software and Affected Versions: code-projects Bus Dispatch and Information System version 1.0 Description: A critical issue was found in the code-projects Bus Dispatch and Information System, affecting some unknown functionality of the file view branch.php. The manipulation...

PT-2023-21319 · Unknown · Code-Projects Bus Dispatch/Information System

Name of the Vulnerable Software and Affected Versions: code-projects Bus Dispatch and Information System version 1.0 Description: A critical issue was found in the code-projects Bus Dispatch and Information System. This issue affects an unknown part of the file adminHome.php. The manipulation of...