WebITR SQL Injection Vulnerability

WebITR is an online time and attendance system. A SQL injection vulnerability exists in Kaifa Technology WebITR version 21023, which stems from insufficient validation of user input and can be exploited by remote attackers to inject arbitrary SQL commands to read a database...

Nagios XI Security Vulnerability

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI versions prior to 5.11.3, which stems from the presence of a S...

Dell PowerProtect Data Domain SQL Injection Vulnerability

Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. A SQL injection vulnerability exists in Dell PowerProtect Data Domain, which stems from the inclusion of a SQL injection vulnerability...

SchedMD Slurm Security Vulnerability

SchedMD Slurm is an open source and highly scalable cluster management and job scheduling system for large and small Linux clusters from SchedMD. A security vulnerability exists in SchedMD Slurm that stems from an SQL injection against the SlurmDBD database...

ZTE MF286R SQL Injection Vulnerability

The ZTE MF286R is a wireless router from ZTE Corporation ZTE of China. A security vulnerability exists in the ZTE MF286R that stems from the presence of a SQL injection vulnerability...

CVE-2023-6765

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as critical. This issue affects the function prepare of the file emailsetup.php. The manipulation of the argument name leads to sql injection. The exploit has been disclosed to the public a...

PT-2023-27701 · Unknown · Common Services Soliberte

Name of the Vulnerable Software and Affected Versions: Common Services soliberte versions prior to 4.3.03 Description: The issue allows attackers to obtain sensitive information via the lat and lng parameters in the functions/point list.php file. This is a SQL Injection vulnerability, which means...

PT-2023-31414 · Schedmd · Schedmd Slurm

Name of the Vulnerable Software and Affected Versions: SchedMD Slurm versions 23.11.x through 23.11.0 Description: An issue was discovered in SchedMD Slurm, allowing SQL Injection against the SlurmDBD database. Recommendations: For SchedMD Slurm versions 23.11.x through 23.11.0, update to version...

Hanbiro SQL Injection Vulnerability

Hanbiro is an application from Hanbiro Inc. A security vulnerability exists in Hanbiro groupware versions prior to V3.8.79 through V3.8.81.1 that stems from the presence of a SQL injection vulnerability...

OTCMS SQL Injection Vulnerability

OTCMS Nettie CMS is an article-based web content management system CMS. A SQL injection vulnerability exists in OTCMS version 7.01, which originates from the parameter sqlContent in the file /admin/indbackstage.php that can lead to SQL injection...

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from a problem with the prepare function in emailsetup.php, whi...

ProLion CryptoSpike Security Vulnerability

ProLion CryptoSpike is ProLion's solution for detecting and combating suspicious activity. A security vulnerability exists in ProLion CryptoSpike version 3.0.15P2 that stems from SQL injection when a user searches a REST API endpoint...

CVE-2023-6647

A vulnerability, which was classified as critical, has been found in AMTT HiBOS 1.0. Affected by this issue is some unknown functionality. The manipulation of the argument Type leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be use...

PHPGurukul Nipah virus Testing Management System SQL Injection Vulnerability

PHPGurukul Nipah Virus Testing Management System is an online virus diagnostic platform from PHPGurukul Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which originates from a SQL injection vulnerability in the file...

GHSA-MVC8-6FFP-JRX5 Authorization bypass in Quarkus

A flaw was found in Quarkus. This issue occurs when receiving a request over websocket with no role-based permission specified on the GraphQL operation, Quarkus processes the request without authentication despite the endpoint being secured. This can allow an attacker to access information and...

The vulnerability of the “search.cgi” file of the License Plate Verifier software allows a violator to execute arbitrary SQL queries.

The vulnerability of the “search.cgi” file of the License Plate Verifier software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary SQL queries...

Zultys MX Series Security Vulnerability

Zultys MX Series is a series of IP phones from Zultys USA. A security vulnerability exists in Zultys MX Series that stems from susceptibility to SQL injection attacks...

The vulnerability of the Tyk application programming interface, related to the lack of security measures for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Tyk cloud firewall’s application programming interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop suffers from a SQL injection vulnerability that stems from the module havi...

CVE-2023-5108

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...