OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures to protect the SQL query structure during the processing of the search parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing the folderid parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

OpenSky Flight Planning SQL Injection

The vulnerability of the OpenSky flight planning and operational management system lies in the lack of measures taken to protect the SQL query structure when processing parameters like testid and taskid. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries...

openSIS SQL Injection

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

ROS-20260129-73-0044

Vulnerability in python-django related to failure to protect sql query structure. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

Microsoft SharePoint Server SQL Injection

The vulnerability of the Microsoft SharePoint Server software relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

YWOA SQL Injection

The vulnerability of YWOA Yunwang OA software for collaborative office work is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute malicious code remotely...

Novel-Plus searchByPage RCE

The vulnerability of the searchByPage function in the Novel-Plus content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely...

Qsync Central SQL Injection

The vulnerability of the Qsync Central file synchronization application is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

JoomlaUX JUX Real Estate SQLi

The vulnerability of the GET Parameter Handler component in the JoomlaUX JUX Real Estate plugin for the Joomla content management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code remotely...

Devolutions Server SQL Injection

The vulnerability of the Devolutions Server platform for centralized and secure management of passwords, user accounts, and confidential information is related to the lack of measures taken to protect the SQL query structure when processing the DateSortField parameter. Exploiting this vulnerabili...

AjaxNetworkController ajaxAction() Remote Monitoring Database Information Disclosure

The vulnerability of the AjaxNetworkController.ajaxAction function in software for remote monitoring with virtual private network capabilities from Advantech WebAccess/VPN is related to the lack of security measures for SQL query structures. Exploiting this vulnerability could allow a malicious...

ExeSQL Component Data Compromise

The vulnerability of the ExeSQL component in the software-based RAG platform for question-answering interactions with RAGFlow relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity...

Nagios XI Core Configuration Manager Data Compromise

The vulnerability of the Core Configuration Manager CCM interface of the Nagios XI IT infrastructure monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to gain elevated privileges...

Advantech WebAccess AjaxDeviceController XSS

The vulnerability of the AjaxDeviceController.ajaxActionValidateTable function in the software for remote monitoring with Advantech WebAccess/VPN virtual private network capabilities is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability may all...

Joomla! SQL Injection

The vulnerability of the Joomla! website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute remote code...

MapServer SQL Injection Code Execution

The vulnerability of the server-based geospatial information system, MapServer, is related to the lack of measures taken to protect the SQL query structure during the processing of the PropertyName parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

Nightingale monitoring SQL Injection

The vulnerability of the Nightingale monitoring and notification system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...

XWiki Platform SQL Injection

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications, lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to the protected information...