8644 matches found
The vulnerability of the admin/?page=items/view_item component in the Web Application SourceCodester Lost and Found Information System allows a malicious user to execute arbitrary SQL queries.
The vulnerability of the “admin/?page=items/viewitem” component in the Web application of the SourceCodester Lost and Found Information System is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execu...
CVE-2023-3473
A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...
The vulnerability in the virtual training environment Moodle, related to insufficient data cleaning, allows a malicious user to execute arbitrary SQL queries in the database.
The vulnerability in the virtual training environment Moodle is related to insufficient cleaning of data provided by users in the external Wiki method for listing pages. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...
PT-2023-25007 · Ibos Oa · Ibos Oa
Name of the Vulnerable Software and Affected Versions: IBOS OA version 4.5.5 Description: A critical issue was found in the actionEdit function of the ?r=dashboard/roleadmin/edit&op=member endpoint, part of the Add User Handler component. The manipulation of the id argument leads to SQL injection...
The vulnerability of the mod_h5pactivity component in the virtual learning environment Moodle allows a hacker to execute arbitrary SQL queries in the database.
The vulnerability of the modh5pactivity component in the virtual learning environment Moodle is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...
The vulnerability in the web interface of the Cisco Smart Software Manager On-Prem administrative tool allows a perpetrator to execute arbitrary SQL code.
The vulnerability of the web interface of the Cisco Smart Software Manager On-Prem administration tool is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...
CVE-2023-34487
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to SQL Injection. SQL injection points exist in the login password input box. This vulnerability can be exploited through time-based blind injection...
PT-2023-24399 · Unknown · Lost/Found Information System
Name of the Vulnerable Software and Affected Versions: Lost and Found Information System version 1.0 Description: The issue is related to a SQL injection vulnerability. It affects the component /php-lfis/admin/?page=system info/contact information. Recommendations: For Lost and Found Information...
WordPress plugin WP ERP SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
Trend Micro Apex Central SQL注入漏洞
Trend Micro Apex Central is a Web-based console from Trend Micro, Inc. Trend Micro Apex Central suffers from a SQL injection vulnerability that can be exploited by an attacker to submit a specially crafted SQL request to manipulate a database, obtain sensitive information or execute arbitrary cod...
The vulnerabilities of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing allow a perpetrator to execute arbitrary requests or gain unauthorized access to protected information.
The vulnerability of the Zoho ManageEngine Password Manager Pro and the Zoho ManageEngine Access Manager Plus software solutions for control, management, and auditing lies in the insufficient protection of the SQL query structure. Exploiting this vulnerability allows an attacker to execute...
CVE-2023-36663
it-novum openITCOCKPIT aka open IT COCKPIT 4.6.4 before 4.6.5 allows SQL Injection by authenticated users via the sort parameter of the API interface...
It-novum OpenITCOCKPIT SQL注入漏洞
It-novum OpenITCOCKPIT is an open source system monitoring tool from It-novum, Germany. A security vulnerability exists in it-novum openITCOCKPIT, which originates from an SQL injection via the sort parameter of the API interface...
PT-2023-24509 · Sourcecodester · Sourcecodester Game Result Matrix System
Name of the Vulnerable Software and Affected Versions: SourceCodester Game Result Matrix System version 1.0 Description: A critical issue was found in the GET Parameter Handler component, specifically affecting the /dipam/athlete-profile.php file. The manipulation of the id argument leads to SQL...
SourceCodester Game Result Matrix System SQL注入漏洞
Game Result Matrix System is a game system by the individual developer imarkpatric. A SQL injection vulnerability exists in SourceCodester Game Result Matrix System version 1.0, which stems from a problem in the file /dipam/athlete-profile.php, where manipulation of the parameter id can lead to s...
CVE-2023-36371
An issue in the GDKfree component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36370
An issue in the gccol component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2023-36369
An issue in the listappend component of MonetDB Server v11.45.17 and v11.46.0 allows attackers to cause a Denial of Service DoS via crafted SQL statements...