WordPress Country State City Dropdown CF7 plugin <= 2.7.2 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Krzysztof Zając in WordPress Plugin Country State City Dropdown CF7 versions = 2.7.2...

CVE-2024-3518

The Media Library Assistant plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcodes in all versions up to, and including, 3.15 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

The vulnerability of the QuMagie multimedia file storage application for QNAP NAS lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the QuMagie multimedia file storage application for QNAP NAS is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Video Station photo album creation application, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Video Station photo album creation application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

MTab Bookmark 安全漏洞

MTab Bookmark is a clean cut powerful navigation site from MTab Inc. MTab Bookmark is a simple and powerful navigation site from MTab, which allows you to quickly add your favorite websites to your bookmarks. A security vulnerability exists in MTab Bookmark version 1.9.5, which originates from a...

The vulnerability of the functionality of the reporting feature of Rockwell Automation’s HMI software FactoryTalk View SE Datalog allows a hacker to gain full access to the data.

The vulnerability of the reporting function of the Rockwell Automation FactoryTalk View SE Datalog software is related to errors in processing input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain full access to the data by sending a specially crafted SQL...

CVE-2023-49334

Zoho ManageEngine ADAudit Plus versions below 7271 allows SQL Injection while exporting a full summary report...

CVE-2024-5116

A vulnerability, which was classified as critical, has been found in SourceCodester Online Examination System 1.0. Affected by this issue is some unknown functionality of the file save.php. The manipulation of the argument vote leads to sql injection. The attack may be launched remotely. The...

CVE-2024-5115

A vulnerability classified as critical was found in Campcodes Complete Web-Based School Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view/teacherprofile.php. The manipulation of the argument index leads to sql injection. The attack can be launched...

ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus prior to version 7271, which stems from a vulnerability that allows SQL injection in dashboard graphical...

Event Registration System SQL注入漏洞

Event Registration System is a QR code based event registration system by Carlo Montero's personal developer. An SQL injection vulnerability exists in Event Registration System version 1.0, which originates from an unknown function in /classes/Master.php that causes SQL injection via the...

PT-2024-34532 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue affects the processing of the file /view/student profile1.php, where the manipulation of the std index argument leads to SQL injection. The attack...

PT-2024-34519 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /view/student payment details4.php. The manipulation of the index argument lead...

The vulnerability of the Zabbix Workstation universal monitoring system, related to errors in processing input data, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix Workstation universal monitoring system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted SQL query remotely...

CVE-2024-5105

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentpaymentdetails.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack...

Simple Inventory System SQL注入漏洞

Simple Inventory System is a simple inventory system by argie individual developer. SourceCodester Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from the parameter ITEM in the file updateprice.php that can lead to SQL injection...

PT-2024-34490 · Sourcecodester · Sourcecodester Simple Inventory System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Inventory System version 1.0 Description: A critical issue has been found in the SourceCodester Simple Inventory System, affecting the file tableedit.php. The manipulation of the from and to arguments leads to SQL...

OpenText Operations Bridge Reporter 安全漏洞

OpenText Operations Bridge Reporter is an informational reporting software from OpenText designed to provide organizations with resource, event, and response time reporting across server, network, and application environments. A security vulnerability exists in OpenText Operations Bridge Reporter...

Vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The Audit Plug-in of the Oracle MySQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the MySQL protocol...

Simple Chat System SQL Injection Vulnerability

Simple Chat System is a simple chat system by nurhodelta17 individual developer. A SQL injection vulnerability exists in Simple Chat System version 1.0, which stems from an incorrect manipulation of the parameters email/password that can lead to SQL injection...