Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment, and HTTP application server platform from OpenLink Software open source. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11 that ste...

Apache Submarine SQL Injection

The vulnerability of the Apache Submarine machine learning platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

CVE-2023-40056

SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account...

Free and Open Source Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

PT-2023-32611 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System version 1.0 Description: A critical issue affects the function delete ltype of the file delete ltype.php in the Loan Type Page component. The manipulation of the ltype id argument leads to SQL injection...

meshery SQL Injection Vulnerability

meshery is a software application. A multi-service grid management plane that provides lifecycle, configuration and performance management of service grids and their workloads. An SQL injection vulnerability exists in meshery versions prior to 0.6.179, which stems from the presence of a SQL...

PT-2023-25525

Name of the Vulnerable Software and Affected Versions Medart Notification Panel versions through 20231123 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor...

Adobe RoboHelp Server SQL Injection

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server relates to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorize...

CVE-2023-5047 SQLi in DRDrive

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DRD Fleet Leasing DRDrive allows SQL Injection. This issue affects DRDrive: before 20231006...

PrestaShop Chronopost Official Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop Chronopost Official. An attacker can exploit...

Tongda OA Automation Tool SQL Injection

The vulnerability of the delete.php script General/system/censorwords/module/delete.php, a tool for automating business processes in Tongda OA, is related to the failure to protect the SQL query structure during the processing of the DELETESTR parameter. Exploiting this vulnerability allows an...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Cross Selling in Modal Cart versions prior to 3.5.0. An attacker...

PT-2023-22033 · Unknown · Veon Computer Service Tracking

Name of the Vulnerable Software and Affected Versions: Veon Computer Service Tracking Software versions prior to 2.0 Veon Computer Service Tracking Software versions through 20231122 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special...

Veon Computer Service Tracking Software SQL Injection Vulnerability

Veon Computer Service Tracking Software is a computer service tracking software from Veon. Veon Computer Service Tracking Software 20231122 and prior versions are vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability...

PT-2023-30531 · Suitecrm · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 8.4.2 Description: The issue affects SuiteCRM, a Customer Relationship Management CRM software application, where Graphql Introspection is enabled without authentication. This exposes the scheme defining all object...

LuxSoft LuxCal Web Calendar Security Vulnerability

LuxSoft LuxCal Web Calendar is a free user-friendly lightweight web-based event calendar from LuxSoft Switzerland. A security vulnerability exists in LuxSoft LuxCal Web Calendar versions prior to 5.2.4M and prior to 5.2.4L, which stems from the presence of a SQL injection vulnerability. An attack...

PT-2023-29543 · Prestashop · Product Catalog (Csv

Name of the Vulnerable Software and Affected Versions: PrestaShop module "Product Catalog CSV, Excel, XML Export PRO" versions prior to 5.0.0 Description: The issue allows a guest to perform SQL injection via the exportProduct:: addDataToDb function. Recommendations: For versions prior to 5.0.0,...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image zoom and other features. A security vulnerability exists in PrestaShop Product Catalog CSV, Excel, XML Export PRO 5.0.0 and...

Teacher Subject Allocation Management System index.php File SQL Injection Vulnerability

Teacher Subject Allocation Management System a teacher subject allocation management system. The Teacher Subject Allocation Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the searchdata parameter of...

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...