176 matches found
WordPress Sprymedia DataTables SQL Injection Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...
WordPress和Sprymedia DataTables SQL注入漏洞
WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Sprymedia DataTables is a JavaScript library for converting HTML tables to dynamic tables from the UK company...
Sprymedia Datatables Input Validation Error Vulnerability
Sprymedia Datatables is a Javascript-based plug-in from Sprymedia UK that supports efficient data presentation on Html pages. A security vulnerability exists in Sprymedia Datatables that stems from the fact that all versions of the package datatables.net are susceptible to prototype contamination...
DataTable Vulnerable to Cross-Site Scripting
Cross-site scripting XSS vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php. Recommendation Update to a version greater than 1.10.8. A fix appears in...
dependencies_analyzer (>=1.0.0, <=1.0.7), jalangi2 (>=0.2.0, <=0.2.6) +1 more potentially affected by CVE-2015-6584 via datatables (>=1.10.6, <=1.10.9)
datatables NPM version =1.10.6, =1.0.0, =0.2.0, =3.1.0, =3.3.1 Source cves: CVE-2015-6584 Source advisory: OSV:GHSA-4MV4-GMMF-Q382...
GHSA-4MV4-GMMF-Q382 DataTable Vulnerable to Cross-Site Scripting
Cross-site scripting XSS vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unittesting/templates/6776.php. Recommendation Update to a version greater than 1.10.8. A fix appears in...
MunkiReport SQL Injection Vulnerability (CNVD-2020-42246)
Munkireport is a reporting tool for the Munki software management program. A SQL injection vulnerability exists in the TableQuery.php file in MunkiReport versions prior to 5.6.3. The vulnerability can be exploited by an attacker to execute arbitrary SQL commands by sending a POST request to...
CVE-2020-15884
A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...
Sql injection
A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...
CVE-2020-15884: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in TableQuery.php in MunkiReport before 5.6.3 allows attackers to execute arbitrary SQL commands via the order0dir field on POST requests to /datatables/data...
SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17760)
SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'search' parameter of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this vulnerability to add...
SpryMedia DataTables SQL Injection Vulnerability
SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'start' and 'length' parameters of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this...
SpryMedia DataTables SQL Injection Vulnerability (CNVD-2021-17761)
SpryMedia DataTables is a British SpryMedia company for the conversion of HTML tables into dynamic tables of JavaScript library . A SQL injection vulnerability exists in the 'order' and 'column' parameters of the Records.php file in SpryMedia DataTables. A remote attacker can exploit this...
MunkiReport SQL Injection Vulnerability
Munkireport is a reporting client for munki. A SQL injection vulnerability exists in app/models/tablequery.php in Munkireport versions prior to 5.3.0. An attacker can exploit this vulnerability to inject arbitrary SQL into webquery via the /datatables/data endpoint...
CVE-2020-10190
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
CVE-2020-10190
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
Sql injection
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
CVE-2020-10190
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
CVE-2020-10190: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in MunkiReport before 5.3.0. An authenticated user could achieve SQL Injection in app/models/tablequery.php by crafting a special payload on the /datatables/data endpoint...
DFIRTrack - The Incident Response Tracking Application
DFIRTrack Digital Forensics and Incident Response Tracking application is an open source web application mainly based on Django using a PostgreSQL database backend. In contrast to other great incident response tools, which are mainly case-based and support the work of CERTs, SOCs etc. in their...