CVE-2022-24266: Improper Neutralization of Special Elements used in an SQL Command

Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/tablemanager/ via the orderby parameter...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

Important: Red Hat Security Advisory: python27:2.7 security update

An update for the python27:2.7 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Debian DLA-1718-1 : sqlalchemy security update

Two vulnerabilities were discovered in SQLALchemy, a Python SQL Toolkit and Object Relational Mapper. CVE-2019-7164 SQLAlchemy allows SQL Injection via the orderby parameter. CVE-2019-7548 SQLAlchemy has SQL Injection when the groupby parameter can be controlled. The SQLAlchemy project warns that...

CVE-2019-9047

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

CVE-2019-9047

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

Sql injection

GoRose v1.0.4 has SQL Injection when the orderby or groupby parameter can be controlled...

CVE-2019-8979

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-8979

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-8979

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-8979

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-8979: Improper Neutralization of Special Elements used in an SQL Command

Kohana through 3.3.6 has SQL Injection when the orderby parameter can be controlled...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

Sql injection

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

CVE-2019-7164: Improper Neutralization of Special Elements used in an SQL Command

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

py39-sqlalchemy12 -- multiple SQL Injection vulnerabilities

21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. nosecurity reports: SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2018-3885

An exploitable SQL injection vulnerability exists in the authenticated part of ERPNext v10.1.6. Specially crafted web requests can cause SQL injections resulting in data compromise. The orderby parameter can be used to perform an SQL injection attack. An attacker can use a browser to trigger thes...