UBUNTU-CVE-2023-37278

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. An administrator can trigger SQL injection via dashboards administration. This vulnerability has been patched in version 10.0.9...

CVE-2023-2957

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Lisa Software Florist Site allows SQL Injection.This issue affects Florist Site: before 3.0...

CVE-2023-37628

Online Piggery Management System 1.0 is vulnerable to SQL Injection...

CVE-2023-27845

SQL injection vulnerability found in PrestaShop lekerawenocs before v.1.4.1 allow a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo, and KerawenHelper::resetCheckoutSessionData components...

PT-2023-21370 · Unknown · Prestashop Lekerawen Ocs

Name of the Vulnerable Software and Affected Versions: PrestaShop lekerawen ocs versions prior to 1.4.1 Description: A SQL injection issue allows a remote attacker to gain privileges via the KerawenHelper::setCartOperationInfo and KerawenHelper::resetCheckoutSessionData components. Recommendation...

CVE-2023-36189

SQL injection vulnerability in langchain before v0.0.247 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component...

Progress Software MOVEit Transfer SQL注入漏洞

Progress Software MOVEit Transfer is an automated file transfer software from Progress Software, USA. The software supports file transfer and provides file transfer activity monitoring. A security vulnerability exists in Progress Software MOVEit Transfer that stems from an SQL injection...

PT-2023-25704 · Kanboard +1 · Kanboard +1

Name of the Vulnerable Software and Affected Versions: Kanboard versions prior to 1.2.31 Description: Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31, an authenticated user is able to perform a SQL Injection, leading to a privilege...

PT-2023-25007 · Ibos Oa · Ibos Oa

Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue was found in the actionEdit function of the ?r=dashboard/roleadmin/edit&op=member endpoint, part of the Add User Handler component. The manipulation of the id argument leads to SQL injection...

PT-2023-24399 · Unknown · Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the component /php-lfis/admin/?page=system info/contact information. Recommendations: For Lost and Found Information...

It-novum OpenITCOCKPIT SQL注入漏洞

It-novum OpenITCOCKPIT is an open source system monitoring tool from It-novum, Germany. A security vulnerability exists in it-novum openITCOCKPIT, which originates from an SQL injection via the sort parameter of the API interface...

UBUNTU-CVE-2023-34600

Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection...

WUZHI CMS SQL注入漏洞

Wuzhicms is five fingers WUZHI company's set of PHP and MySQL based on open source content management system CMS. A SQL injection vulnerability exists in Wuzhicms version 4.1.0. An attacker can exploit this vulnerability to execute arbitrary code via the checktitle function...

PT-2023-22709

Name of the Vulnerable Software and Affected Versions TMT Lockcell versions prior to 15 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For versions...

FUEL CMS SQL注入漏洞

FUEL CMS is a content management system CMS based on the Codelgniter framework. A security vulnerability exists in FUEL CMS v1.5.2, which is caused by an SQL injection vulnerability in the id parameter of the /controllers/Blocks.php page...

RuoYi SQL注入漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A SQL injection vulnerability exists in RuoYi 4.7.7 and earlier versions. The vulnerability stems from improperly filtered sql statements, resulting in SQL injection and DoS attacks...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop jmspagebuilder version 3.x. The vulnerability stems from a SQL...

PT-2023-24197 · Xibo · Xibo

Name of the Vulnerable Software and Affected Versions: Xibo versions 3.2.0 through 3.3.2 Description: A SQL injection issue was discovered in the /display/map API route, allowing an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values into the bounds...

PT-2023-22332 · Sourcecodester · Sourcecodester Faculty Evaluation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Faculty Evaluation System version 1.0 Description: A critical issue has been found in the SourceCodester Faculty Evaluation System, affecting some unknown functionality of the file "index.php?page=edit user". The manipulation o...

Ipekyolu Software Auto Damage Tracking Software SQL注入漏洞

Ipekyolu Software Auto Damage Tracking Software is an automatic damage tracking software from Ipekyolu Software. A SQL injection vulnerability exists in previous versions of Ipekyolu Software Auto Damage Tracking Software 4, which stems from improper neutralization of the particular element used...