CVE-2023-20010

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This...

Mangboard SQL注入漏洞

Mangboard is an e-commerce website of the South Korean company Mangboard. A SQL injection vulnerability exists in Mangboard versions prior to 2.0.4. The vulnerability stems from an unchecked input value, which is an SQL injection vulnerability that can be exploited by an attacker to execute...

WordPress Plugin The Paid Memberships Pro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...

PT-2023-10003 · Unknown · Oktora24 2Moons

Name of the Vulnerable Software and Affected Versions: oktora24 2moons affected versions not specified Description: A critical vulnerability has been found in oktora24 2moons, affecting an unknown function. The manipulation leads to sql injection. Recommendations: At the moment, there is no...

PT-2023-10249 · Unknown · Copperwall Twiddit

Name of the Vulnerable Software and Affected Versions: copperwall Twiddit affected versions not specified Description: A critical issue affects the processing of the file index.php, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is...

click-reminder SQL注入漏洞

click-reminder is a Web 2.0 application by lierdakil personal developer. It helps users to remember the last time they did something. A SQL injection vulnerability exists in click-reminder. An attacker could exploit this vulnerability to cause a sql injection...

danynab movify-j SQL注入漏洞

danynab is an application by the individual developer of danynab. An SQL injection vulnerability exists in danynab movify-j, which stems from the fact that incorrect manipulation of the movieId/username parameter can lead to sql injection...

phoenixcf SQL注入漏洞

phoenixcf is an application by iamdroppy Personal Developer. phoenixcf suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to cause a sql injection...

PT-2023-1078 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 11.51 through 14 Cisco Unified Communications Manager Session Management Edition versions 11.51 through 14 Description: The issue is related to errors in processing input data in the web interface...

PrivateSky apersistence SQL注入漏洞

PrivateSky apersistence is a module of PrivateSky open source. PrivateSky apersistence suffers from a SQL injection vulnerability. Attackers exploit this vulnerability to cause sql injection...

PT-2023-10242 · Unknown · Theradsystem

Name of the Vulnerable Software and Affected Versions: saemorris TheRadSystem affected versions not specified Description: A critical issue was found in saemorris TheRadSystem, affecting the redirect function of the login.php file. The manipulation of the user/pass argument leads to SQL injection...

WordPress plugin WooCommerce SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin WooCommerce 1.0 and previo...

The vulnerability of the setTaskEditorItem component in the centralized network device and port management system Advantech iView allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the setTaskEditorItem component in the Centralized Network Devices and Ports Management System of Advantech iView relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

PT-2023-10235 · Vinylmap · Vinylmap

Name of the Vulnerable Software and Affected Versions: vinylmap version 2071174A Description: A critical issue has been found, affecting the contact function of the file recordstoreapp/views.py. This issue leads to sql injection. Recommendations: Apply the patch...

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem with some unknown functions in the file viewprod.php, where manipulation of the parameter id can lead to sql injection. No details of the...

Discussion-Board SQL注入漏洞

Discussion-Board is a PHP-based online forum. Discussion-Board suffers from a SQL injection vulnerability that originates in the function displayallreplies in the file functions/main.php, which operates on the parameter str to cause SQL injection...

desafio_buzz_woody SQL注入漏洞

desafiobuzzwoody is an application by Bruno Mattoso Gonçalves Personal Developer. A SQL injection vulnerability exists in desafiobuzzwoody that stems from unknown processing that operates to cause SQL injection...

krail-jpa SQL注入漏洞

krail-jpa is a KrailOrg open source module for use with Krail. The module provides JPA functionality . A SQL injection vulnerability exists in krail-jpa versions prior to 0.9.1, which stems from an unknown partial impact and operates to cause SQL injection...

PT-2023-10149 · Unknown · Agy Pontifex.Http

Name of the Vulnerable Software and Affected Versions: agy pontifex.http versions prior to 0.1.0 Description: A critical issue has been found in the agy pontifex.http software, affecting the lib/Http.coffee file, which can lead to sql injection. Recommendations: For versions prior to 0.1.0, upgra...