CVE-2022-31357: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

PT-2022-20711

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/ordering/index.php?q=category&search=" API endpoint. The search parameter is vulnerable. Recommendations For...

CVE-2022-31355: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

CVE-2021-41654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

PT-2022-11453

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description The issue allows attackers to execute arbitrary SQL commands via the keyValue parameter in the "/coreframe/app/pay/admin/index.php" API endpoint. This enables attackers to manipulate database queries,...

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67151)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a missing filter escape for SQL data in the parent parameter of index,php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67152)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

PT-2022-11474

Name of the Vulnerable Software and Affected Versions SEOmatic plugin version 3.4.10 for Craft CMS 3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script via a GET to "/index.php?action=seomatic/file/seo-file-link" with url parameter containing the...

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

CVE-2021-41756

CVE-2021-41756 affects dynamicMarkt versions 3.10 and earlier, with SQL injection in the kat parameter of index.php. The vulnerability arises from improper handling of the kat parameter, enabling potentially unauthenticated SQL injection. Public references in the dataset corroborate the descripti...

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

CVE-2021-41755

CVE-2021-41755 concerns dynamicMarkt versions

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

CVE-2021-41755: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

PT-2022-7902

Name of the Vulnerable Software and Affected Versions PHPList versions 3.2.6 Description A critical issue affects the processing of the file /lists/index.php of the component Edit Subscription, leading to sql injection. The attack may be initiated remotely. Recommendations For PHPList version...