10214 matches found
CVE-2020-36004
AppCMS 2.0.101 in /admin/downloadframe.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information...
AppCMS SQL注入漏洞
APPCMS is a professional APP content management system, APP application part needs to be used in combination with data center. A SQL injection vulnerability exists in /admin/downloadframe.php in AppCMS version 2.0.101. An attacker can exploit this vulnerability to obtain sensitive information fro...
CVE-2021-24321
The Bello - Directory & Listing WordPress theme before 1.6.0 did not sanitise the btbblistingfieldpricerangeto, btbblistingfieldnowopen, btbblistingfieldmylng, listinglistview and btbblistingfieldmylat parameters before using them in a SQL statement, leading to SQL Injection issues...
CVE-2021-25932
In OpenNMS Horizon, versions opennms-1-0-stable through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.6-1 are vulnerable to Stored Cross-Site Scripting, since t...
CVE-2021-29090
Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors...
PT-2021-20142 · Unknown · Covid19 Testing Management System
Name of the Vulnerable Software and Affected Versions: COVID19 Testing Management System version 1.0 Description: The issue is related to SQL Injection via the admin panel. This allows for potential unauthorized access and manipulation of data. Recommendations: For COVID19 Testing Management Syst...
CVE-2021-25935
In OpenNMS Horizon, versions opennms-17.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the...
CVE-2020-25409
Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters...
Projectsworlds College Management System SQL注入漏洞
Projectsworlds College Management System is a college management system. projectWorlds College Management System Php version 1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute SQL statements to obtain sensitive database information...
CVE-2021-24314
The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue...
CVE-2021-24295
It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The updatelog function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected v...
Piwigo SQL注入漏洞
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
CVE-2020-27243
An exploitable SQL injection vulnerability exists in ‘listImmoLabels.jsp’ page of OpenClinic GA 5.173.3 application. The immoService parameter in the ‘listImmoLabels.jsp’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...
CVE-2020-27230
A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findSector parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection An attacker can make an authenticated HTTP request to trigger this...
GHSA-2382-QX5H-RVQH SQL Injection in odata4j
odata4j 0.7.0 allows ExecuteCountQueryCommand.java SQL injection. NOTE, this product is apparently discontinued...
GHSA-F96G-24CG-F24W SQL Injection in odata4j
odata4j 0.7.0 allows ExecuteJPQLQueryCommand.java SQL injection. NOTE: this product is apparently discontinued...
OpenEMR SQL注入漏洞
OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in library/customtemplate/ajaxcode.php in OpenEMR version 5.0.2.1. No detailed vulnerability details are provided at this time...
PHPGurukul Online Book Store SQL注入漏洞
PHPGurukul Online Book Store is a PHP-based online bookstore website system. A SQL injection vulnerability exists in Online Book Store v1.0. The vulnerability can be exploited to execute arbitrary code via the bookisbn parameter of book.php...
Ampache SQL注入漏洞
Ampache is a web-based audio/video application and file manager. An SQL injection vulnerability exists in versions prior to Ampache 4.2.2 that allows unauthenticated users to perform SQL injection...
