JoomlaUX JUX Real Estate SQLi

The vulnerability of the GET Parameter Handler component in the JoomlaUX JUX Real Estate plugin for the Joomla content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely...

Ivanti Endpoint Manager SQL Injection Information Disclosure

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

Ivanti Endpoint Manager SQL Injection Information Disclosure

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

Ivanti Endpoint Manager SQL Injection Information Disclosure

The vulnerability of the Ivanti Endpoint Manager software management tool is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to read arbitrary data remotely...

UnlockWebServerGatewaySettings Code Execution File Read Write

The vulnerability of the UnlockWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...

TeleControl Server UnlockUser Method Arbitrary File Access

The vulnerability of the UnlockUser method in software for managing and monitoring remote devices in telemetry and telemechanics systems related to the lack of security measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...

Ivanti EPM updateAssetInfo Code Execution

The vulnerability of the updateAssetInfo method in the Ivanti EPM endpoint management software is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Zohocorp ManageEngine Exchange Reporter Plus SQL Injection

The vulnerability of the monitoring, analysis, and reporting software Zohocorp ManageEngine Exchange Reporter Plus is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database...

Tailoring Management System SQL Injection

The vulnerability of the setgeneral.php file in the Tailoring Management System TMS involves a lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code, gain unauthorized access to read, modify, or delete data, or cause ...

Advantech WebAccess SQL Injection

The vulnerability of the Advantech WebAccess remote monitoring software lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries against the database remotely...

JDBC driver pgjdbc Code Execution

The vulnerability of the JDBC driver pgjdbc, which allows Java programs to connect to PostgreSQL databases, is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted SQL...

Nagios XI Bulk Modification Tool SQLi

The vulnerability of the Bulk Modification Tool component in Nagios XI is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary SQL code...

Groundhogg Plugin XSS

The vulnerability of the Groundhogg plugin in the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

Paid Memberships Pro Plugin SQL Injection

The vulnerability of the Paid Memberships Pro plugin of the WordPress content management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PHPGurukul Hospital Management System Disclosure

The vulnerability of the func2.php function in the web application of the PHPGurukul Hospital Management System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to disclose the protected information remotely...

Codoforum Forum Code Execution

The vulnerability of the gettopicinfo function sys/CODOF/Forum/Topic.php in the Codoforum forum creation software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

D-Link Central WiFi Manager Component Code Execution

The vulnerability of the /web/Public/Conn.php component of the software controller for centralized control of D-Link Central WiFi Manager CWM100 relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker operating remotely to execute...

IBM Maximo Asset Management SQL Injection

The vulnerability of the IBM Maximo Asset Management software’s asset management system lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...