46609 matches found
Anchor CMS 0.12.3 - Error Log Exposure
Anchor CMS 0.12.3 is susceptible to an error log exposure vulnerability due to an issue in config/error.php. The error log is exposed at an errors.log URI, and contains MySQL credentials if a MySQL error such as "Too many connections" has occurred. id: CVE-2018-7251 info: name: Anchor CMS 0.12.3 ...
phpMyAdmin <4.8.5 - Local File Inclusion
phpMyAdmin before 4.8.5 is susceptible to local file inclusion. When the AllowArbitraryServer configuration setting is set to true, an attacker can read, with the use of a rogue MySQL server, any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfi...
EUVD-2026-51312
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
CVE-2026-62845
Kamaji (Hosted Control Plane Manager for Kubernetes) is affected by a SQL injection in the PostgreSQL and MySQL datastore drivers. The root cause is that DataStoreUsername and DataStoreSchema are interpolated into SQL statements via fmt.Sprintf without escaping identifiers, and these fields have ...
CVE-2026-62845 Kamaji: SQL injection via unescaped datastore identifiers in PostgreSQL/MySQL drivers
Kamaji is the Hosted Control Plane Manager for Kubernetes. Prior to 26.7.4-edge, the PostgreSQL and MySQL datastore drivers build DDL statements by interpolating the user-supplied DataStoreUsername/DataStoreSchema directly into SQL via fmt.Sprintf, without escaping identifiers. These fields have ...
SUSE CVE-2026-55170
OpenFGA is an authorization/permission engine built for developers. Prior to 1.18.0, when MySQL is being used as the datastore and authorization decisions rely on case-sensitive user strings, the tuple, changelog, and authorizationmodel identifier columns can compare case-distinct values such as...
EUVD-2025-210534
https://www.sourcecodester.com Advocate office management system 1.0 is affected by: SQL Injection. The impact is: execute arbitrary code remote. The component is: control/activatecase.php,?id=1. The attack vector is: A SQL Injection vulnerability exists in the activatecase.php in parameter id...
mariadb: MariaDB server: SQL injection vulnerability via improper handling of big5 character set with mysql_real_escape_string()
A flaw was found in MariaDB server. An application processing non-validated user input, which then uses mysqlrealescapestring and sends data to the database via text protocol with the big5 character set, is vulnerable to SQL injection. This allows a remote attacker to execute malicious SQL...
UBUNTU-CVE-2026-60184
CVE-2026-60184 affects MySQL Server, MySQL Cluster Server: Replication. Affects MySQL 8.4...
UBUNTU-CVE-2026-60187
CVE-2026-60187 affects MySQL Server, MySQL Cluster Server: Replication. Affects MySQL 8.4...
UBUNTU-CVE-2026-60182
CVE-2026-60182 affects MySQL Server, MySQL Cluster Server: Clone Plugin. Affects MySQL 8.4...
UBUNTU-CVE-2026-60191
CVE-2026-60191 affects MySQL Server, MySQL Cluster Server: Replication. Affects MySQL 8.4...
UBUNTU-CVE-2026-60163
CVE-2026-60163 affects MySQL Server, MySQL Cluster Server: Group Replication Plugin. Affects MySQL 8.4...
UBUNTU-CVE-2026-60316
CVE-2026-60316 affects MySQL Server, MySQL Cluster Server: X Plugin. Affects MySQL 8.4...
UBUNTU-CVE-2026-60747
CVE-2026-60747 affects MySQL Server, MySQL Cluster Server: Replication. Affects MySQL 8.4...
UBUNTU-CVE-2026-61109
CVE-2026-61109 affects MySQL Server, MySQL Cluster Server: JSON. Affects MySQL 8.4...
UBUNTU-CVE-2026-60177
CVE-2026-60177 affects MySQL Server, MySQL Cluster Server: Clone Plugin. Affects MySQL 8.4...