8926 matches found
UBUNTU-CVE-2023-37278
GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9...
CVE-2023-1547
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...
CVE-2023-2957
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisa Software Florist Site allows SQL Injection.This issue affects Florist Site: before 3.0...
Lisa Software Florist Site SQL Injection Vulnerability
Lisa Software Florist Site is a florist site from Lisa Software. A SQL injection vulnerability exists in versions prior to Lisa Software Florist Site 3.0, which stems from susceptibility to SQL injection attacks...
CVE-2023-37628
Online Piggery Management System 1.0 is vulnerable to SQL Injection...
UBUNTU-CVE-2023-32200
There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a SPARQL query. This issue affects Apache Jena: from 3.7.0 through 4.8.0...
PT-2023-25574 · Sourcecodester · Sourcecodester Service Provider Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A critical issue has been found in the system, affecting the /classes/Master.php file, specifically when f=save inquiry. The manipulation of the id argument leads to S...
WordPress Plugin WP EasyCart SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP EasyCar...
Apache Jena security vulnerabilities
Apache Jena is the United States Apache Apache Foundation of a Java Semantic Web framework. Used to build semantic Web and linked data applications. Apache Jena suffers from a code execution vulnerability that stems from insufficient restrictions on called script functions. An attacker can exploi...
Nesote Inout Blockchain FiatExchanger SQL Injection Vulnerability
Nesote Inout Blockchain FiatExchanger is a secure online cryptocurrency exchange service from Nesote. A SQL injection vulnerability exists in Nesote Inout Blockchain FiatExchanger version 3.0, which stems from an unknown section in the file /index.php/coins/updatemarketboxslider of the component...
WManager SQL injection vulnerability
WManager is a business process manager from WManager open source. A security vulnerability exists in wmanager v.1.0.7 and earlier versions, which stems from the presence of a SQL injection vulnerability that allows remote attackers to obtain sensitive information through a carefully crafted scrip...
Progress MOVEit Transfer SQL Injection
The vulnerability of the software for processing and transmitting confidential data using Progress MOVEit Transfer is related to the lack of measures taken to protect the SQL query structure during the processing of the UserProcessPassChangeRequest parameter at the human.aspx endpoint. Exploiting...
CVE-2023-2852
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Softmed SelfPatron allows SQL Injection. This issue affects SelfPatron : before 2.0...
Yontem Informatics Vehicle Tracking System SQL Injection Vulnerability
Yontem Informatics Vehicle Tracking System is a vehicle tracking system from Yontem. A SQL injection vulnerability exists in Yontem Informatics Vehicle Tracking System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor advisory...
WordPress plugin “All In One Redirection” has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
WordPress plugin MStore API has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...
CVE-2023-27845
SQL injection vulnerability found in PrestaShop lekerawenocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components...
PT-2023-21370 · Unknown · Prestashop Lekerawen Ocs
Name of the Vulnerable Software and Affected Versions: PrestaShop lekerawen ocs versions prior to 1.4.1 Description: A SQL injection issue allows a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo and KerawenHelper::resetCheckoutSessionData components. Recommendation...
SourceCodester Shopping Website SQL Injection Vulnerability
SourceCodester Shopping Website is a shopping website type CMS. A SQL injection vulnerability exists in SourceCodester Shopping Website version 1.0, which stems from a parameter email in the file checkavailability.php that can lead to sql injection...