PT-2022-26830 · Unknown · Rukovoditel

Name of the Vulnerable Software and Affected Versions: Rukovoditel version 3.2.1 Description: A SQL injection issue was found in Rukovoditel via the order by parameter at the "/rukovoditel/index.php?module=logs/view&type=php" endpoint. This allows for potential SQL injection attacks...

Exploit for SQL Injection in Jflyfox Jfinal_Cms

CVE-2022-37201 CVE-2022-37201 POC POC First of all you...

CVE-2022-25811

The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection...

mariadb: crash via window function in expression in ORDER BY

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/fieldconv.cc, affecting availability...

mariadb: crash via window function in expression in ORDER BY

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/fieldconv.cc, affecting availability...

mariadb: crash via window function in expression in ORDER BY

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/fieldconv.cc, affecting availability...

EulerOS 2.0 SP5 : mariadb (EulerOS-SA-2022-1902)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY. CVE-2021-46657 Note that Tenable...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. getsortbytable in MariaDB allows an application crash via certain subquery uses of ORDER BY...

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-30048

Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter...

CVE-2022-28111

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

Mybatis-PageHelper SQL注入漏洞

Mybatis-PageHelper is a paging plug-in. An SQL injection vulnerability exists in Mybatis-PageHelper versions 1.0 inclusive through 5.3.0 inclusive, which stems from the orderBy parameter's lack of validation for external input SQL statements. An attacker could use this vulnerability to execute...

PT-2022-18817 · Unknown · Mybatis Pagehelper

Name of the Vulnerable Software and Affected Versions: MyBatis PageHelper versions 1.x.x through 5.3.x Description: A time-blind SQL injection vulnerability was discovered in MyBatis PageHelper via the orderBy parameter. This issue allows for potential SQL injection attacks. Recommendations: For...

CVE-2022-27466

MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do...

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

mariadb: Crash in get_sort_by_table() in subquery with ORDER BY having outer ref

getsortbytable in MariaDB before 10.6.2 allows an application crash via certain subquery uses of ORDER BY...

CVE-2022-0254

The WordPress Zero Spam WordPress plugin before 5.2.11 does not properly sanitise and escape the order and orderby parameters before using them in a SQL statement in the admin dashboard, leading to a SQL injection...