3577 matches found
PT-2023-27332 · Unknown · Demon Image Annotation
Name of the Vulnerable Software and Affected Versions: demon image annotation versions n/a through 5.1 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
CVE-2023-45342
Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'phone' parameter of the routers/register-router.php resource does not validate the characters received and they are sent unfiltered to the database...
Open-Xchange App Suite SQL Injection Vulnerability
Open-Xchange App Suite is an email and productivity suite client software from Open-Xchange Germany. A security vulnerability exists in Open-Xchange App Suite that stems from the presence of an SQL injection vulnerability...
PT-2023-32421 · Unknown · Campcodes Simple Student Information System
Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown part of the file /admin/index.php. The manipulation of the argument id leads to SQL injection. Th...
CVE-2023-44025
SQL injection vulnerability in addify Addifyfreegifts v.1.0.2 and before allows a remote attacker to execute arbitrary code via a crafted script to the getrulebyid function in the AddifyfreegiftsModel.php component...
CVE-2023-36508
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Databa...
CVE-2023-5429
The Information Reel plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
WordPress Plugin GamiPress SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin GamiPress ...
PT-2023-29784 · Senayan · Slims Senayan Library Management System +1
Name of the Vulnerable Software and Affected Versions: Senayan Library Management Systems Slims version 9 Senayan Library Management Systems Bulian version 9.6.1 Description: The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the...
WordPress Plugin RSVPMaker SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin RSVPMaker...
WordPress Plugin Jquery accordion slideshow SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...
Exploit for Code Injection in Vmware Spring_Cloud_Function
CVE-2022-22963-Poc-Bearcules This is a POC for CVE-2022-229...
The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system allows a hacker to execute arbitrary SQL code.
The vulnerability in the admin-ajax.php script of the Photo Gallery administration panel of the WordPress content management system is related to the failure to protect the SQL query structure during the processing of the bwgtagidbwgthumbnails0 parameter. Exploiting this vulnerability allows an...
Task Reminder System SQL Injection Vulnerability
Task Reminder System is a Task Reminder System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Task Reminder System version 1.0, which stems from the parameter id of the file classes/Users.php?f=delete that can lead to SQL injection...
PT-2023-32368 · Sourcecodester · Sourcecodester Task Reminder System
Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue affects some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the id argument leads to sql injection. The attack may be launched...
Projectworlds Leave Management System Project SQL Injection Vulnerability
Projectworlds Leave Management System Project is a leave management system project by Projectworlds India. Projectworlds Leave Management System Project v1.0 suffers from an SQL injection vulnerability that originates in the parameter setcasualleave in the file admin/setleaves.php...
PT-2023-32347 · Unknown · Sourcecodester Task Reminder System
Name of the Vulnerable Software and Affected Versions: SourceCodester Task Reminder System version 1.0 Description: A critical issue was found, affecting some unknown functionality of the file /classes/Master.php?f=delete reminder. The manipulation of the id argument leads to SQL injection. This...
CVE-2023-5781
A vulnerability, which was classified as critical, has been found in Tongda OA 2017 11.10. This issue affects the function DELETESTR of the file general/system/resmanage/monitor/deletewebmail.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been...