1196 matches found
CVE-2024-12146
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...
CVE-2024-12144
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2024-12146
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...
CVE-2024-12146
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...
CVE-2024-12144
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2024-12144
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2024-12146
The CVE-2024-12146 entry describes an SQL Injection vulnerability in Finder Fire Safety Finder ERP/CRM (New System), caused by improper neutralization of special elements in SQL commands. Affected software is Finder ERP/CRM (New System) prior to version 18.12.2024. The issue enables potential dat...
CVE-2024-12146 SQLi in Finder Fire Safety's Finder ERP/CRM (New System)
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection. This issue affects Finder ERP/CRM New System: before 18.12.2024...
CVE-2024-12146 SQLi in Finder Fire Safety's Finder ERP/CRM (New System)
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM New System allows SQL Injection.This issue affects Finder ERP/CRM New System: before 18.12.2024...
CVE-2024-12144 SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2024-12144 SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...
CVE-2024-12144
CVE-2024-12144 affects Finder ERP/CRM (Old System) and is caused by improper neutralization of special elements in SQL commands, enabling SQL injection. The issue applies to Finder ERP/CRM (Old System) versions before 18.12.2024. The description documents a high-severity impact (C/H/I/A) with a n...
Finder ERP SQL注入漏洞
Finder ERP is an enterprise resource planning software from Finder Turkey. An SQL injection vulnerability exists in Finder ERP versions prior to 18.12.2024, which stems from improper neutralization of special elements in SQL commands and could lead to SQL injection...
Finder ERP SQL注入漏洞
Finder ERP is an enterprise resource planning software from Finder Turkey. An SQL injection vulnerability exists in Finder ERP versions prior to 18.12.2024, which stems from improper validation of input syntax correctness and could lead to SQL injection...
CVE-2024-13440
The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssfwpusername’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
WordPress Super Store Finder plugin <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting vulnerability
Unauthenticated SQL Injection to Stored Cross-Site Scripting vulnerability discovered by Muhammad Zeeshan Xib3rR4dAr in WordPress Plugin Super Store Finder versions = 7.0...
CVE-2024-13440
The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssfwpusername’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2024-13440
The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssfwpusername’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2024-13440 Super Store Finder <= 7.0 - Unauthenticated SQL Injection to Stored Cross-Site Scripting
The Super Store Finder plugin for WordPress is vulnerable to SQL Injection via the ‘ssfwpusername’ parameter in all versions up to, and including, 7.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...
CVE-2024-13440
CVE-2024-13440 : The WordPress plugin Super Store Finder is affected by an unauthenticated SQL Injection via the ssf_wp_user_name parameter in all versions up to and including 7.0, caused by insufficient escaping and improper query preparation. This vulnerability enables an attacker to inject add...