632 matches found
WordPress Plugin Simple Membership WP user Import SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Simple Membership WP user...
Build App Online < 1.0.19 - Unauthenticated SQL Injection
The plugin does not properly sanitise and escape some parameters before using them in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection Additional plugins required: https://wordpress.org/plugins/wc-multivendor-marketplace/...
CVE-2022-2717
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2022-2718
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-page-extrafields page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2022-2718
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-page-extrafields page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2022-2717
The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of...
CVE-2022-2717
CVE-2022-2717 affects the WordPress plugin “JoomSport – for Sports: Team & League, Football, Hockey & more” up to version 5.2.5. The vulnerability is an SQL Injection via the orderby parameter on the joomsport-events-form page, caused by insufficient escaping and an inadequately prepared SQL quer...
PT-2022-18265 · WordPress · Joomsport
Name of the Vulnerable Software and Affected Versions: JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress versions up to, and including, 5.2.5 Description: The issue is related to SQL Injection via the orderby parameter on the "joomsport-events-form" page. This...
PT-2022-18271 · WordPress · Joomsport – For Sports: Team & League
Name of the Vulnerable Software and Affected Versions: JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress versions up to, and including, 5.2.5 Description: The issue allows authenticated attackers with administrative privileges to perform SQL Injection via the...
CVE-2022-25811
The Transposh WordPress Translation WordPress plugin through 1.0.8 does not sanitise and escape the order and orderby parameters before using them in a SQL statement, leading to a SQL injection...
CVE-2022-36605
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...
CVE-2022-36605
Yimioa v6.1 was discovered to contain a SQL injection vulnerability via the orderbyGET parameter...
Yimioa SQL注入漏洞
Yimioa is the collaborative office software of Cloud.com Software. Based on enterprise-class workflow engine, in-depth research and development for 15 years, served more than 1000 customers, based on springboot framework. With mature OA office functions, comes with a low-code development platform...
WordPress Five Minute Webshop plugin SQL injection vulnerability (CNVD-2022-64660)
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Five Minute Webshop plugin 1.3.2 and earlier versions are vulnerable to SQL injection, whic...
CVE-2022-1685
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection...
CVE-2022-1685
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection...
WordPress plugin Five Minute Webshop SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. The WordPress Five Minute Webshop plugin 1.3.2 and earlier versions are vulnerable to SQL injection, whic...
CVE-2022-1685 Five Minute Webshop <= 1.3.2 - Admin+ SQLi via orderby
The Five Minute Webshop WordPress plugin through 1.3.2 does not properly validate and sanitise the orderby parameter before using it in a SQL statement via the Manage Products admin page, leading to an SQL Injection...
Jfinal CMS SQL注入漏洞
Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...