2905 matches found
Voltronic Power ViewPower 安全漏洞
Voltronic Power ViewPower is Voltronic Power's monitoring and management software for solar inverters. Voltronic Power ViewPower Pro suffers from a SQL injection vulnerability that is caused by failing to properly validate a user-supplied string before constructing a SQL query using it. An attack...
Kliqqi 安全漏洞
Kliqqi is a Content Management System CMS. A security vulnerability exists in Kliqqi-CMS version 2.0.2, which originates from a SQL injection vulnerability in the file loaddata.php...
Delta Electronics DIAEnergie SQL注入漏洞
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics Taiwan, China used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximiz...
CVE-2024-33911
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Weblizar School Management Pro.This issue affects School Management Pro: from n/a through 10.3.4...
PT-2024-17218 · WordPress · Wp Erp
Name of the Vulnerable Software and Affected Versions: WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.13.1 Description: The issue is related to time-based SQL Injection via the id parameter due to...
WordPress The School Management Pro plugin <= 10.3.4 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Ivan Spiridonov Patchstack Alliance in WordPress Plugin School Management Pro versions = 10.3.4...
HubBank SQL注入漏洞
HubBank is an application from HubBank, Inc. A security vulnerability exists in HubBank version 1.0.2, which stems from a SQL injection vulnerability in the /admin/viewusers.php endpoint...
PT-2024-30030 · Bluenet Technology · Bluenet Technology Clinical Browsing System
Name of the Vulnerable Software and Affected Versions: BlueNet Technology Clinical Browsing System version 1.2.1 Description: A critical issue has been found, affecting an unknown part of the file /xds/deleteStudy.php. The manipulation of the documentUniqueId argument leads to SQL injection. It i...
PT-2024-3094 · Solarwinds · Solarwinds Platform
Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: A vulnerability was identified in the user interface of the SolarWinds Platform, related to a SWQL injection issue. This vulnerability requires authentication and user interacti...
F-logic DataCube3 安全漏洞
F-logic DataCube3 is a small measurement terminal system from F-logic Japan. A security vulnerability exists in F-logic DataCube3 version v.1.0, which stems from a SQL injection vulnerability in the reqid parameter...
CVE-2024-28558
SQL Injection vulnerability in sourcecodester Petrol pump management software v1.0, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via crafted payload to admin/app/webcrud.php...
Macrob7 Macs Framework Cms 安全漏洞
Macrob7 Macs Framework Cms is an open source Cms framework by the individual developer Macdonald Terrence Robinson. A security vulnerability exists in Macrob7 Macs CMS version 1.1.4f and earlier, which stems from the presence of a SQL injection vulnerability that could allow a remote attacker to...
Desdev DedeCMS SQL注入漏洞
Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open source content management system CMS from China's Zhuozhuo Network Desdev. The system features content publishing, content management, content editing and content retrieval. DedeCMS 5.7.112-UTF8 has a SQL injection...
PHPGurukul Small CRM SQL注入漏洞
Small CRM is a customer relationship management system. A SQL injection vulnerability exists in Small CRM, which stems from a lack of validation of externally-entered SQL statements in the change password handler. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...
WordPress Advanced Page Visit Counter plugin <= 8.0.6 - Auth. SQL Injection (SQLi) vulnerability
Auth. SQL Injection SQLi vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Advanced Page Visit Counter versions = 8.0.6...
Advocate Office Management System SQL注入漏洞
Advocate Office Management System is an office management system by the individual developer mayurik. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from a SQL injection vulnerability in the file /control/adds.php...
PT-2024-24000 · Solwin Infotech · Solwin Infotech User Activity Log
Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Activity Log versions 1.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation b...
Church Management System SQL注入漏洞
Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the Church Management System, which is caused by a SQL injection vulnerability in the password parameter of the login.php file...
Church Management System 安全漏洞
Church Management System is a church management system. A security vulnerability exists in version 1.0 of the Church Management System, which stems from an SQL injection vulnerability in the Gender parameter of the /admin/addsundaysch.php file...