3577 matches found
Gimmie vBulletin SQL注入漏洞
Gimmie vBulletin is a Gimmie open source forum plugin . Gimmie vBulletin 1.2.2 version of the SQL injection vulnerability , the vulnerability stems from the file triggerreferral.php unknown handling problems , the operation of the parameter referrername will lead to sql injection...
jocms SQL注入漏洞
jocms is an easy to edit simple CMS for mxgbr individual developers. A security vulnerability exists in jocms version 0.8, which is caused by SQL injection, and can be exploited by remote attackers to run arbitrary SQL commands and view sensitive information via the jodeletemask function in...
Easyone CRM SQL注入漏洞
Easyone CRM is a customer relationship management system from Easyone. Manage your business relationships and access your data, from sales to marketing, wherever you are, directly from your management. A security vulnerability exists in Easyone CRM version v5.50.02, which stems from a SQL injecti...
Bangresto SQL注入漏洞
Bangresto is a restaurant source code POS by the individual developer Mesin Kasir. A security vulnerability exists in Bangresto version 1.0 that stems from the presence of SQL injection via the itemID parameter...
Forget Heart Message Box SQL注入漏洞
Forget Heart Message Box is a messaging website. v1.1 of Forget Heart Message Box is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the name parameter of ca.php. An attacker could use this vulnerability to execute illegal SQL commands to ste...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2023-20010
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This...
Mangboard SQL注入漏洞
Mangboard is an e-commerce website of the South Korean company Mangboard. A SQL injection vulnerability exists in Mangboard versions prior to 2.0.4. The vulnerability stems from an unchecked input value, which is an SQL injection vulnerability that can be exploited by an attacker to execute...
Hospital Management System SQL注入漏洞
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...
PT-2023-10249 · Unknown · Copperwall Twiddit
Name of the Vulnerable Software and Affected Versions: copperwall Twiddit affected versions not specified Description: A critical issue affects the processing of the file index.php, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is...
PT-2023-1078 · Cisco · Cisco Unified Communications Manager Session Management Edition +1
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 11.51 through 14 Cisco Unified Communications Manager Session Management Edition versions 11.51 through 14 Description: The issue is related to errors in processing input data in the web interface...
PrivateSky apersistence SQL注入漏洞
PrivateSky apersistence is a module of PrivateSky open source. PrivateSky apersistence suffers from a SQL injection vulnerability. Attackers exploit this vulnerability to cause sql injection...
WordPress plugin WooCommerce SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WooCommerce 1.0 and previo...
PT-2023-10235 · Vinylmap · Vinylmap
Name of the Vulnerable Software and Affected Versions: vinylmap version 2071174A Description: A critical issue has been found, affecting the contact function of the file recordstoreapp/views.py. This issue leads to sql injection. Recommendations: Apply the patch...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2022-26134check The script is used to check remotely if...
desafio_buzz_woody SQL注入漏洞
desafiobuzzwoody is an application by Bruno Mattoso Gonçalves Personal Developer. A SQL injection vulnerability exists in desafiobuzzwoody that stems from unknown processing that operates to cause SQL injection...
krail-jpa SQL注入漏洞
krail-jpa is a KrailOrg open source module for use with Krail. The module provides JPA functionality . A SQL injection vulnerability exists in krail-jpa versions prior to 0.9.1, which stems from an unknown partial impact and operates to cause SQL injection...
Judging Management System SQL注入漏洞
Judging Management System is a Judging Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Judging Management System v1.0, which originates from a username parameter containing a SQL injection...
PT-2023-9790 · Visteon · Visteon Infotainment System
Name of the Vulnerable Software and Affected Versions: Visteon Infotainment System affected versions not specified Description: This issue allows physically present attackers to execute arbitrary code on affected installations of the Visteon Infotainment system. Authentication is not required to...