8926 matches found
PT-2023-15485 · Unknown · Bang Resto
Name of the Vulnerable Software and Affected Versions: Bangresto version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the itemID parameter. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...
Bangresto SQL injection vulnerability
Bangresto is a restaurant source code POS by the individual developer Mesin Kasir. A security vulnerability exists in Bangresto version 1.0 that stems from the presence of SQL injection via the itemID parameter...
WDAC OLE DB Component Code Execution
The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-22324
SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...
OpenCats SQL injection vulnerability
OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.7, which stems from the importID parameter of its Import viewerrors function that allows an attacker to implement SQL injection...
SiteServer CMS SQL injection vulnerability
SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...
Online Tours & Travels Management System SQL Injection Vulnerability
Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter todate that ca...
WordPress Plugin LearnPress has a SQL injection vulnerability.
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...
Amano Xoffice parking solutions has a SQL injection vulnerability
Amano Xoffice parking solutions is an application from Amano. It provides an ideal solution for all types of parking lots. Amano Xoffice parking solutions version 7.1.3879 suffers from a security vulnerability that stems from susceptibility to SQL injection attacks...
CVE-2020-21152
SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...
CVE-2023-20010
A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This...
Mangboard SQL injection vulnerability
Mangboard is an e-commerce website of the South Korean company Mangboard. A SQL injection vulnerability exists in Mangboard versions prior to 2.0.4. The vulnerability stems from an unchecked input value, which is an SQL injection vulnerability that can be exploited by an attacker to execute...
Hospital Management System SQL Injection Vulnerability
Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...
WordPress Plugin The Paid Memberships Pro: SQL Injection Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
PT-2023-10003 · Unknown · Oktora24 2Moons
Name of the Vulnerable Software and Affected Versions: oktora24 2moons affected versions not specified Description: A critical vulnerability has been found in oktora24 2moons, affecting an unknown function. The manipulation leads to sql injection. Recommendations: At the moment, there is no...
PT-2023-10249 · Unknown · Copperwall Twiddit
Name of the Vulnerable Software and Affected Versions: copperwall Twiddit affected versions not specified Description: A critical issue affects the processing of the file index.php, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is...
Danynab Movify-J SQL Injection Vulnerability
danynab is an application by the individual developer of danynab. An SQL injection vulnerability exists in danynab movify-j, which stems from the fact that incorrect manipulation of the movieId/username parameter can lead to sql injection...
PT-2023-1078 · Cisco · Cisco Unified Communications Manager Session Management Edition +1
Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 11.51 through 14 Cisco Unified Communications Manager Session Management Edition versions 11.51 through 14 Description: The issue is related to errors in processing input data in the web interface...
PhoenixCF SQL Injection Vulnerability
phoenixcf is an application by iamdroppy Personal Developer. phoenixcf suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to cause a sql injection...
Click-reminder SQL injection vulnerability
click-reminder is a Web 2.0 application by lierdakil personal developer. It helps users to remember the last time they did something. A SQL injection vulnerability exists in click-reminder. An attacker could exploit this vulnerability to cause a sql injection...