PT-2024-5453 · Microsoft · Sql Server Native Client Ole Db Provider

Name of the Vulnerable Software and Affected Versions: SQL Server Native Client OLE DB Provider affected versions not specified Description: The issue is related to an integer overflow in the SQL Server Native Client OLE DB Provider. Exploitation of this issue may allow a remote attacker to execu...

Kelixun Communication Command and Dispatch Management Platform Security Vulnerability

Kelixun Communication Command and Dispatch Management Platform Kelixun is a communication command and dispatch management platform from Kelixun, China. A security vulnerability exists in Kelixun Communication Command and Dispatch Management Platform version 7.6.6.439 and prior versions, which...

AMTT HiBOS Security Vulnerability

AMTT HiBOS is a hotel broadband operating system from AmTech Century AMTT, China. A security vulnerability exists in AMTT HiBOS version v3.0.3.151204, which originates from the presence of a SQL injection vulnerability...

Billing System security breach

Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the username parameter...

NHibernate Security Vulnerabilities

NHibernate is a mature, open source object-relational mapper from NHibernate Open Source. A security vulnerability exists in NHibernate. An attacker exploiting this vulnerability can construct SQL queries directly on the user side using the ObjectToSQLString method...

PT-2024-37625 · Unknown · Hitout Carsale

Name of the Vulnerable Software and Affected Versions: Hitout Carsale version 1.0 Description: A critical issue has been discovered, affecting the OrderController.java file. The manipulation of the orderBy argument leads to SQL injection. This issue can be exploited remotely. Recommendations: For...

The vulnerability of the driverprofile.php file of the tailoring management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the driverprofile.php file in the tailoring management system’s control system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the driveri...

The vulnerability of the Apache Superset data visualization software lies in insufficient validation of input data. This allows attackers to execute arbitrary SQL commands and disclose sensitive information that should be protected.

The vulnerability of the Apache Superset data visualization software relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands and disclose sensitive information that is protected by the system...

Vanna Code Issue Vulnerability

Vanna is a personalized AI SQL agent from Vanna Inc. Vanna version v0.3.4 suffers from a code issue vulnerability that stems from vulnerability to SQL injection attacks, where an attacker can inject malicious SQL training data and generate corresponding queries to write arbitrary files on the...

The vulnerability of the software for FileCatalyst Workflow’s file exchange mechanism lies in the lack of protective measures for the SQL query structure, allowing attackers to exploit their privileges.

The vulnerability of the FileCatalyst Workflow file sharing software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to enhance their privileges by injecting specially crafted SQL queries...

PT-2024-37575 · Bethesda · Bethesda Online Reservation System

Name of the Vulnerable Software and Affected Versions: Bethesda Online Reservation System version 1.0 Description: A critical issue has been found in the Bethesda Online Reservation System, affecting some unknown functionality of the file controller.php. The manipulation of the rmtype id argument...

Magarsus Consultancy SSO SQL Injection Vulnerability

Magarsus Consultancy SSO is a single sign-on application from Magarsus Consultancy. A SQL injection vulnerability exists in Magarsus Consultancy SSO Single Sign On versions 1.0 through 1.1, which arises from an improper neutralization of special elements used in SQL commands, insufficient...

Intrado 911 Emergency Gateway Security Vulnerability

Intrado 911 Emergency Gateway is an on-premise management appliance from Intrado USA. A security vulnerability exists in Intrado 911 Emergency Gateway that stems from a login form that is susceptible to a blind SQL injection attack, which allows an attacker to execute malicious code, steal data, ...

VulnCheck KEV: CVE-2023-2215

A vulnerability classified as critical has been found in Campcodes Coffee Shop POS System 1.0. Affected is an unknown function of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2024-5989

Due to an improper input validation, an unauthenticated threat actor can send a malicious message to invoke SQL injection into the program and cause a remote code execution condition on the Rockwell Automation ThinManager® ThinServer™...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...

CraftCMS Security Vulnerability

CraftCMS is a content management system from CraftCMS, Inc. A security vulnerability exists in CraftCMS version v3.7.31 and earlier versions. An attacker exploited the vulnerability to perform a SQL injection attack via a GraphQL API endpoint...

PT-2024-6878 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon version 24.04.2 Description: A SQL injection vulnerability allows a remote high-privileged attacker to execute arbitrary SQL commands via create user form inputs. This issue is related to the lack of protection of the SQL query...

Food Ordering Management System SQL Injection Vulnerability

Food Ordering Management System is a food ordering management system by Carlo Montero, an individual developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in Food Ordering Management System version 1.0, which stems from...

WordPress plugin Media Library Assistant security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...