8926 matches found
Criminals exploit Blauw SQL injection vulnerability
Criminals Blauw is an application by NoxxieNl Individual Developer. Criminals Blauw suffers from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter gambleMoney resulting in sql injection...
Lead Management System SQL Injection Vulnerability
Lead management system is a lead management system by Mayuri K. Personal developer. SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of externally entered SQL statements in the id parameter of removeCategories.php. An attacker could use th...
VulnCheck KEV: CVE-2021-24183
The tutorquizbuildergetquestionform AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students...
Dronfelipe SQL injection vulnerability
dronfelipe is a website by Kyle Bebak, an individual developer. A SQL injection vulnerability exists in dronfelipe. An attacker could exploit this vulnerability to perform a sql injection attack...
SAP Business Planning and Consolidation SQL Injection
The vulnerability of the SAP Business Planning and Consolidation software solution for managing organizational financial indicators is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...
CVE-2022-38492
An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03. One parameter allows SQL injection. Version 2022.1.110.1.02 fixes the vulnerability...
PT-2023-1258 · Microsoft · Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft WDAC OLE DB provider for SQL Server affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft WDAC OLE DB provider for SQL Server component in Windows operating systems. This...
EasyVista SQL injection vulnerability
EasyVista is an application from EasyVista, Inc. creates digital experiences that help organizations work smarter, faster, and better automatically. A SQL injection vulnerability exists in EasyVista version 2020.2.125.3, which stems from the presence of SQL injection...
Terminal Operating System SQL Injection Vulnerability
Terminal Operating System is a terminal operating system that accelerates the flow of container, general cargo, liquid cargo, ro-ro and warehouse services at the terminal. A SQL injection vulnerability exists in Terminal Operating System versions prior to 5.0.13. An attacker could exploit this...
SAP BPC MS SQL Injection Vulnerability
SAP BPC MS is a business planning and consolidation application from SAP Germany that provides planning, budgeting, forecasting, and financial consolidation functions. SAP BPC MS version 10.0 810 contains a SQL injection vulnerability that stems from the application's lack of validation of...
EasyVista SQL injection vulnerability
EasyVista is an application from EasyVista, Inc. creates digital experiences that help organizations work smarter, faster, and better automatically. A SQL injection vulnerability exists in EasyVista version 2020.2.125.3, which stems from the presence of SQL injection on some parameters...
Mercurius security vulnerabilities
Mercurius is a GraphQL adapter Fastify. A security vulnerability exists in Mercurius versions prior to 10.5.0, which is caused by a denial of service attack when any user sends an incorrectly formatted packet to "/graphql" via WebSocket...
PT-2023-9861 · Unknown · Web-Cyradm
Name of the Vulnerable Software and Affected Versions: web-cyradm affected versions not specified Description: A critical issue has been found in web-cyradm, affecting some unknown functionality of the file auth.inc.php. The manipulation of the argument login/login password/LANG leads to sql...
PT-2023-10128 · Unknown · Learnmesomecodes Project3
Name of the Vulnerable Software and Affected Versions: LearnMeSomeCodes project3 affected versions not specified Description: A critical issue was found in the LearnMeSomeCodes project3, affecting the search first name function of the file search.rb. This issue leads to sql injection. The...
Search Results SQL Injection Vulnerabilities
Search Results is an application by Forumhulp.com individual developers. It records the search terms searched by visitors. Search Results suffers from an SQL injection vulnerability that stems from a problem with the function listkeywords in the file event/listener.php, where manipulation of the...
pyChao SQL Injection Vulnerability
pyChao is an application by Dr. Azrael Tod, a personal developer. It is mainly used for Facts and Newsfeeds and interacts with WebChao-Blog. A SQL injection vulnerability exists in pyChao. An attacker could exploit this vulnerability to perform a sql injection attack...
PT-2023-10132 · Unknown · Ananich Bitstorm
Name of the Vulnerable Software and Affected Versions: ananich bitstorm affected versions not specified Description: A critical issue was found in ananich bitstorm, affecting an unknown functionality of the file announce.php. The manipulation of the event argument leads to SQL injection...
PT-2023-10119 · Unknown · Typcn Blogile
Name of the Vulnerable Software and Affected Versions: typcn Blogile affected versions not specified Description: A critical vulnerability was found in typcn Blogile, affecting the getNav function of the file server.js. The manipulation of the query argument leads to sql injection. Recommendation...
Cub-Scout-Tracker SQL injection vulnerability
cub-scout-tracker is a library. A SQL injection vulnerability exists in cub-scout-tracker. An attacker could exploit this vulnerability to perform a sql injection attack...