Schneider Electric EcoStruxure Operator Terminal Expert SQL injection vulnerability

Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software support is mainly used to create and edit touch applications. A SQL injection vulnerability exists in Schneider Electric EcoStruxure Operator Terminal...

UBUNTU-CVE-2022-39323

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements and can be exploited by attackers to to obtain sensitiv...

Tim Campus Confession Wall SQL Injection Vulnerability

Tim Campus Confession Wall is a confession wall organized by Tim Campus. Tim Campus Confession Wall suffers from a SQL injection vulnerability that stems from unknown functionality in the file share.php, where manipulation of the parameter postid can result in sql injection...

CVE-2021-38737

SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...

CVE-2021-37782

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...

Seccome Ehoney security vulnerability

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack/token in the unknown function of the parameter Payload operation lead...

SEMCMS SQL Injection Vulnerability

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntMessage.php...

Seccome Ehoney security vulnerability

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack/falco in the unknown function of the parameter Payload operation lead...

Delta Electronics DIAEnergie SQL injection vulnerability

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...

PT-2022-24929 · Metabase · Metabase

Name of the Vulnerable Software and Affected Versions: Metabase versions prior to 0.41.9, 0.42.6, 0.43.7, 0.44.5, 1.41.9, 1.42.6, 1.43.7, and 1.44.5 Description: The issue allows Remote Code Execution RCE in Metabase, a data visualization software, when users can write SQL queries on H2 databases...

Delta Electronics DIAEnergie SQL injection vulnerability

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...

Metabase security vulnerabilities

Metabase is an open source data analytics platform from Metabase, Inc. in the United States. A security vulnerability exists in Metabase that stems from the fact that H2 the example database can allow Remote Code Execution RCE, which can be abused by users who are able to write SQL queries on the...

eLearning System security vulnerabilities

eLearning System is an eLearning System by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of eLearning System, which stems from a sql injection vulnerability due to incorrect manipulation of the parameter id...

Johnson Controls CKS CEVAS Cross-Site Scripting Vulnerability

Johnson Controls CKS CEVAS is a web-based billing and reporting solution from Johnson Controls, Inc. It is used for rescue and emergency services. A security vulnerability exists in Johnson Controls CKS CEVAS versions prior to 1.01.46. An attacker exploited the vulnerability to retrieve data via ...

WordPress plugin Form Maker has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

WordPress plugin WP All Export Pro has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

Juniper GraphQL Execution Environment Uncontrolled Recursion DoS

The vulnerability of the Juniper GraphQL execution environment library is related to an uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Vulnerabilities fixed in Wordpress

Several vulnerabilities have been fixed in Wordpress. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site Scripting XSS SQL Injection Accessing sensitive data Wordpress...

PT-2022-22961 · Sourcecodester · Sourcecodester Cashier Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A critical issue was found in the Login Page component, specifically in the /queuing/login.php file. The manipulation of the username and password arguments leads to SQL injection...