926 matches found
CVE-2025-15560 SQL Injection in NesterSoft WorkTime
An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can...
CVE-2025-15560
An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can...
CVE-2025-15560: Improper Neutralization of Special Elements used in an SQL Command
An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server "widget" API endpoint to inject SQL queries. If the Firebird backend is used, attackers are able to retrieve all data from the database backend. If the MSSQL backend is used the attacker can...
PT-2026-20799
Name of the Vulnerable Software and Affected Versions WorkTime affected versions not specified Description An authenticated attacker with minimal permissions can exploit a SQL injection in the WorkTime server ''widget'' API endpoint to inject SQL queries. If the Firebird backend is used, attacker...
PT-2026-39443
Name of the Vulnerable Software and Affected Versions PHP versions 8.2.0 through 8.2.30 PHP versions 8.3.0 through 8.3.30 PHP versions 8.4.0 through 8.4.20 PHP versions 8.5.0 through 8.5.5 Description The PDO Firebird driver improperly handles NUL bytes during the preparation of SQL queries. Duri...
The vulnerability of the PDO driver for Firebird database management systems, a programming language interpreter for PHP, allows attackers to execute SQL injections.
The vulnerability of the PDO driver for the Firebird database management system, which is written in the PHP programming language, is related to the lack of protective measures taken against the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute SQL injections...
Exploit for CVE-2025-67261
CVE-2025-67261 - Content-based blind SQL injection on Abacre R...
Astra Linux – Vulnerability in Firebird 3.0
Firebird is a relational database. Prior to versions 3.0.13, 4.0.6, and 5.0.3, there was a NULL pointer dereferencing denial-of-service vulnerability in Firebird. This specific flaw existed in the parsing of xdr messages from clients. It led to NULL pointer dereferencing and denial-of-service...
CVE-2020-10552
An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...
Firebird SQL Detection Consolidation
Consolidation of Firebird SQL detections. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; ifdescription...
PHP Firebird () (No.1 from 2025.10.10 15:00:32)
...
EUVD-2003-0276
Malware in sbrugna...
EUVD-2008-1880
Malware in sbrugna...
EUVD-2014-9148
Malware in sbrugna...
EUVD-2020-3004
Malware in sbrugna...
EUVD-2006-7191
Malware in sbrugna...
EUVD-2006-7192
Malware in sbrugna...
EUVD-2007-3511
Malware in sbrugna...