CVE-2021-36748

PrestaHome Blog (ph_simpleblog) for PrestaShop before version 1.7.8 is vulnerable to a SQL injection (blind) via the sb_category parameter in the list controller. Exploitation could allow an attacker to extract data from the database. The issue is corroborated by multiple sources, including a ded...

CVE-2021-27999

CVE-2021-27999 affects Local Services Search Engine Management System Project 1.0. The vulnerability is a SQL injection in the editid parameter that enables admins to dump all data from the database. Exploitation details are not provided beyond the description; no patch/version is specified in th...

Sql injection

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php...

CVE-2020-19301

The CVE-2020-19301 issue affects vaeThink v1.0.1, with a vulnerability in the vae_admin_rule database table that allows arbitrary code execution via a crafted payload in the condition parameter. The PT-2021-10336 entry confirms the vulnerability against vaeThink 1.0.1 and notes no available fix/v...

in star7th/showdoc

✍️ Description The referenced code contains a hard-coded salt that is used for all passwords, ideally - a unique salt should be generated for each password and then would be stored alongside it as oppose to the constant one that is used for all passwords in the showdoc repository. 🕵️‍♂️ Proof of...

CVE-2021-37478

In NavigateCMS version 2.9.4 and below, function block is vulnerable to sql injection on parameter block-order, which results in arbitrary sql query execution in the backend database...

CVE-2021-2438

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM...

SQL Injection Vulnerability in Clinical Case Database System of Chongqing Yuanqiu Technology Co.

The Clinical Case Database System is a database system used to extract to form a complete original medical record that is used for case reference. A SQL injection vulnerability exists in the clinical case database system of Chongqing Yuanqiu Technology Co. Ltd, which can be exploited by attackers...

CVE-2020-20583

A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information...

CVE-2020-20583

CVE-2020-20583 affects LJCMS, specifically the vulnerable endpoint /question.php in Version v4.3.R60321. The root cause is a SQL injection flaw that allows attackers to access sensitive database information. The available documents do not specify an exploit method, active exploitation, or confirm...

SQL Injection Vulnerability in Ai Qing Lemon CMS (CNVD-2021-51264)

Aizumi CMS is a php music website developed with php MySQL. Aizumi CMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Intelligent Park Comprehensive Management Platform of Zhejiang Dahua Technology Co.(CNVD-2021-51488)

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. There is a SQL injection vulnerability in the integrated management platform of Zhejiang Dahua Technology Co., Ltd. that can be exploited by an attacker to obtain sensitive...

SQL Injection Vulnerability in Quality Tracing System of Heilongjiang Ligao Technology Co.

Heilongjiang Ligao Technology Co., Ltd. is a company that provides safe food production and quality control solutions for food companies. A SQL injection vulnerability exists in the quality traceability system of Heilongjiang Ligao Technology Co. Ltd, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in iSCS of Shenzhen Sephiroth Technology Co.

The iSCS is an all-in-one access control machine. Ltd. iSCS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect, are caused by synchronization errors when using shared resources, allowing attackers to alter the configuration of DB2.

The vulnerability of IBM DB2 database management systems and IBM DB2 Connect stems from synchronization errors when using shared resources. Exploiting this vulnerability can allow attackers to alter the configuration of DB2...

SQL Injection Vulnerability in Hybrid Alarm Receiver (Professional Edition) at Honeywell (China) Limited (CNVD-2021-46817)

Ltd. is part of Honeywell International, a diversified, high-tech advanced manufacturing company. A SQL injection vulnerability exists in Honeywell China Limited Hybrid Answering Machine Professional Edition, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Jeecg Boot of Beijing National Torch Information Technology Co. Ltd (CNVD-2021-47665)

Jeecg Boot is a low-code BPM-based platform. A SQL injection vulnerability exists in JeecgBoot of Beijing National Torch Information Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information from a database...

CVE-2020-4945

IBM Db2 for Linux, UNIX and Windows includes Db2 Connect Server 11.5 could allow an authenticated user to overwrite arbirary files due to improper group permissions. IBM X-Force ID: 191945...

IBM DB2 安全漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2 for Linux, UNIX, and Windows including Db2 Connect Server that stems from a specific...

IBM DB2 信息泄露漏洞

IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM DB2 for Linux, UNIX, and Windows including DB2 Connect Server...