268 matches found
CVE-2024-40479: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in "/admin/quizquestion.php" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the "eid" parameter...
CVE-2024-40479
The Kashipara Online Exam System v1.0 is affected by a SQL injection vulnerability located in the /admin/quizquestion.php endpoint. This flaw allows remote attackers to execute arbitrary SQL commands by exploiting the "eid" parameter . The vulnerability results in a High base severity (8.1) with ...
PT-2024-28866 · Unknown · Kashipara Online Exam System
Name of the Vulnerable Software and Affected Versions: Kashipara Online Exam System version 1.0 Description: A SQL injection vulnerability in "/admin/quizquestion.php" allows remote attackers to execute arbitrary SQL commands via the eid parameter. Recommendations: For Kashipara Online Exam Syste...
CVE-2024-39304
ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQ...
CVE-2024-39304 ChurchCRM SQL Injection Vulnerability
ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQ...
CVE-2024-39304: Improper Neutralization of Special Elements used in an SQL Command
ChurchCRM is an open-source church management system. Versions of the application prior to 5.9.2 are vulnerable to an authenticated SQL injection due to an improper sanitization of user input. Authentication is required, but no elevated privileges are necessary. This allows attackers to inject SQ...
WordPress Qualified Electronic Signatures by eID Easy Plugin <= 3.3.0 is vulnerable to Backdoor
Software Qualified Electronic Signatures by eID Easy Type Plugin Vulnerable versions = 3.3.0 Fixed in 3.3.1 OWASP Top 10 A3: Injection Classification Backdoor CVE N/A Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 7c90ad9b98a6 Credits Sansec.io Required privilege...
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
Sql injection
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
PT-2024-21189 · Churchcrm · Churchcrm
Name of the Vulnerable Software and Affected Versions: ChurchCRM version 5.5.0 Description: The issue concerns a Blind SQL Injection vulnerability, specifically time-based, that can be exploited via the EID parameter in the EventEditor.php file. This allows for potential unauthorized access to...
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
CVE-2024-25896
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
CVE-2024-25896
ChurchCRM version 5.5.0 is vulnerable to a Time-based Blind SQL Injection vulnerability located in the EventEditor.php file. The root cause is the improper neutralization of special elements used in an SQL command via the EID POST parameter. This flaw can be exploited to gain unauthorized access ...
CVE-2024-25896: Improper Neutralization of Special Elements used in an SQL Command
ChurchCRM 5.5.0 EventEditor.php is vulnerable to Blind SQL Injection Time-based via the EID POST parameter...
CVE-2024-23674
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...
Authentication flaw
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...
CVE-2024-23674
The Online-Ausweis-Funktion eID scheme in the German National Identity card (through version 2024-02-15) is vulnerable to authentication bypass via spoofing, a flaw known as sPACE (Spoofing Password Authenticated Connection Establishment). A man-in-the-middle attacker can assume a victim's identi...
CVE-2024-23674: Authentication Bypass by Spoofing
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...
CVE-2024-23674
The Online-Ausweis-Funktion eID scheme in the German National Identity card through 2024-02-15 allows authentication bypass by spoofing. A man-in-the-middle attacker can assume a victim's identify for access to government, medical, and financial resources, and can also extract personal data from...