Sql injection

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...

Sql injection

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

CVE-2018-17374

SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17374

CVE-2018-17374 describes a SQL Injection in the Joomla! Auction Factory 4.5.5 component exposed through the filter_order_Dir or filter_order parameters. The vulnerability stems from unsafe handling of externally entered SQL statements in this component. According to the linked records, the CVE ha...

CVE-2018-17381

The CVE-2018-17381 vulnerability affects the Joomla! Dutch Auction Factory 2.0.2 component. A SQL Injection exists via the filter_order_Dir or filter_order parameter due to insufficient validation of externally supplied SQL statements in the database layer, enabling potentially unauthorized queri...

CVE-2018-17381

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

CVE-2018-17386

CVE-2018-17386 : The Joomla! Micro Deal Factory 2.4.0 component contains a SQL injection vulnerability via the id parameter or PATH_INFO routes (mydeals/ or listdeals/). Attackers could potentially execute arbitrary SQL commands against the underlying database. The description is consistently rep...

CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

Design/Logic Flaw

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

PT-2019-9458

Name of the Vulnerable Software and Affected Versions Micro Deal Factory version 2.4.0 Description The issue exists due to SQL Injection in the Micro Deal Factory component for Joomla. This can be exploited via the id parameter or the PATH INFO to "mydeals/" or "listdeals/". Recommendations For...

CVE-2018-18472

Western Digital WD My Book Live and WD My Book Live Duo all versions have a root Remote Command Execution bug via shell metacharacters in the /api/1.0/rest/languageconfiguration language parameter. It can be triggered by anyone who knows the IP address of the affected device, as exploited in the...

CVE-2018-17386: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

PT-2019-9457

Name of the Vulnerable Software and Affected Versions Dutch Auction Factory version 2.0.2 Description A SQL Injection issue exists in the Dutch Auction Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.0.2,...

CVE-2018-17381: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17374: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filterorderDir or filterorder parameter...

PT-2019-9456

Name of the Vulnerable Software and Affected Versions Auction Factory version 4.5.5 Description The issue exists due to SQL Injection in the Auction Factory component for Joomla. This is achieved via the filter order Dir or filter order parameter. Recommendations For Auction Factory version 4.5.5...

SQL Injection Vulnerability in SIGER Digital Factory System

SIGER Digital Factory System is an equipment maintenance management software created by Jiangsu SIGER Data Technology Co., Ltd. for the equipment management of industrial manufacturing enterprises. SIGER Digital Factory System suffers from a SQL injection vulnerability, which can be exploited by...

Design/Logic Flaw

There is Factory Reset Protection FRP bypass security vulnerability in P20 Huawei smart phones versions earlier than Emily-AL00A 9.0.0.167 C00E81R1P21T8. When re-configuring the mobile phone using the factory reset protection FRP function, an attacker can login the Talkback mode and can perform...