PT-2025-28409 · Unknown · Quiter Gateway

Name of the Vulnerable Software and Affected Versions: Quiter Gateway versions prior to 4.7.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the id factura field in the "/FacturaE/listado facturas ficha.jsp" endpoint. This enables attackers to...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the idfactura parameter, which could lead to database manipulation...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from an SQL injection in the mensaje parameter that could lead to database manipulation...

Quiter Gateway SQL注入漏洞

Quiter Gateway is an API interface from Quiter Spain. A SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, which stems from a SQL injection in the idconcesion parameter, which could lead to database manipulation...

Ivanti Endpoint Manager SQL注入漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to manage all endpoint devices in an enterprise network. Ivanti Endpoint Manager suffers from a SQL injection vulnerability that originates from improperly filtered submitted SQL statements, which can be...

CVE-2025-40716: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action...

CVE-2025-40731

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...

CVE-2025-40731 SQL injection vulnerability in Daily Expense Manager

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...

CVE-2025-40731

CVE-2025-40731 is a SQL injection vulnerability in Daily Expense Manager v1.0 affecting the /update.php endpoint, exploitable via the pname, pprice and id parameters. The vulnerability allows an attacker to retrieve, create, update and delete databases as described in the cited sources. Affected ...

CVE-2025-40731 SQL injection vulnerability in Daily Expense Manager

SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php...

PT-2025-27423 · Unknown · Daily Expense Manager

Name of the Vulnerable Software and Affected Versions: Daily Expense Manager version 1.0 Description: The issue allows an attacker to retrieve, create, update, and delete databases through the pname, pprice, and id parameters in the "/update.php" API endpoint. Recommendations: For Daily Expense...

CVE-2025-0966

IBM InfoSphere Information Server 11.7 is affected by CVE-2025-0966 due to an SQL injection vulnerability (CWE-89). A remote attacker could send crafted SQL statements to view, add, modify, or delete data in the back-end database. The IBM security bulletin indicates affected product/version: Info...

CVE-2025-40728

SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customersupport/manageuser.php endpoint...

CVE-2025-6169

The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents...

Dmacroweb DM Corporative CMS SQL Injection Vulnerability (CNVD-2025-14356)

Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter codform in the file...

Dmacroweb DM Corporative CMS SQL Injection Vulnerability (CNVD-2025-14355)

Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter name in the file /antcatalogue.as...

Dmacroweb DM Corporative CMS SQL Injection Vulnerability

Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the parameters name and cod in file /antbuspre.as...

CVE-2025-40728 SQL injection vulnerability in Customer Support System

SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customersupport/manageuser.php endpoint...

CVE-2025-40728

CVE-2025-40728 affects Customer Support System v1.0. SQL injection via the id parameter in /customer_support/manage_user.php enables an authenticated attacker to retrieve, create, update, and delete databases. The advisories describe high impact (confidentiality/integrity/availability) with low a...

CVE-2025-40728 SQL injection vulnerability in Customer Support System

SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customersupport/manageuser.php endpoint...