6756 matches found
PT-2024-10743 · WordPress · Video Carousel Slider With Lightbox Plugin
Name of the Vulnerable Software and Affected Versions: video carousel slider with lightbox plugin for WordPress versions 1.0.0 through 1.0.6 Description: The issue is related to SQL Injection via the id parameter due to insufficient escaping on the user-supplied parameter and lack of sufficient...
CVE-2024-42885
SQL Injection vulnerability in ESAFENET CDG 5.6 and before allows an attacker to execute arbitrary code via the id parameter of the data.jsp page...
CVE-2024-8469
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...
CVE-2024-8469
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/employee/index.php, and retrieve all the information stored in it...
CVE-2024-8467
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-8465
SQL injection vulnerability, by which an attacker could send a specially designed query through userid parameter in /jobportal/admin/user/controller.php, and retrieve all the information stored in it...
CVE-2024-8467
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-8469
CVE-2024-8469 is a SQL injection vulnerability in the Job Portal (e.g., PHPGurukul Job Portal) where an attacker can manipulate the id parameter in /jobportal/admin/employee/index.php to retrieve data. It’s documented across multiple sources (NVD, CVE List, vuln enrichment) with high to critical ...
CVE-2024-8467 SQL injection vulnerability in Job Portal
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
CVE-2024-8467
CVE-2024-8467 describes a SQL injection in the Job Portal, caused by unsafely handling the id parameter in /jobportal/admin/category/index.php. The vulnerability affects the Job Portal component (as seen in multiple sources) and could lead to unauthorized disclosure of information (confidentialit...
CVE-2024-8467 SQL injection vulnerability in Job Portal
SQL injection vulnerability, by which an attacker could send a specially designed query through id parameter in /jobportal/admin/category/index.php, and retrieve all the information stored in it...
PHPGurukul Job Portal SQL注入漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the id parameter in /jobportal/admin/employee/index.php...
PT-2024-39034 · Unknown · Job Portal
Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: The issue is related to a SQL injection vulnerability. An attacker could send a specially designed query through the id parameter in the "/jobportal/admin/category/index.php"...
PHPGurukul Job Portal SQL注入漏洞
PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the userid parameter in /jobportal/admin/user/controller.php...
CVE-2024-42885
CVE-2024-42885 concerns a SQL injection in ESAFENET CDG (v5.6 and earlier) that allows an attacker to execute arbitrary code via the id parameter on the data.jsp page. Affected product: ESAFENET CDG up to version 5.6. Root cause: improper handling of input used in SQL queries on data.jsp. Impact:...
CVE-2024-44817
SQL Injection vulnerability in ZZCMS v.2023 and before allows a remote attacker to obtain sensitive information via the id parameter in the adv2.php component...
CVE-2024-44817
CVE-2024-44817 describes a SQL Injection in ZZCMS v.2023 and earlier, exploitable via the id parameter in the adv2.php component. A remote attacker can obtain sensitive information. Public details across NVD/Red Hat/CNNVD/CVE records confirm the same vulnerability vector; no explicit exploit code...
PT-2024-31264 · Zzcms · Zzcms
Name of the Vulnerable Software and Affected Versions: ZZCMS versions 2023 and earlier Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the id parameter in the "adv2.php" component. Recommendations: For ZZCMS versions 2023 and earlier, consider...