Sql injection

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

CVE-2022-27473

The connected sources confirm CVE-2022-27473 is a SQL injection in Roothub 2.6.0’s Topics Searching feature, exploitable via the s parameter to execute arbitrary SQL remotely due to lack of input validation. Affected: Roothub 2.6.0; Root cause: unsafely assembled SQL from external input. Practica...

CVE-2022-27473

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

CVE-2022-27472

The connected documents confirm CVE-2022-27472 affects Roothub 2.6.0, specifically the Topics Counting feature. The vulnerability is a SQL injection exploitable via the s parameter, allowing remote attackers to execute arbitrary SQL commands and potentially access or modify data in the database. ...

CVE-2022-27472

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

CVE-2022-27473: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

PT-2022-18441

Name of the Vulnerable Software and Affected Versions Roothub version 2.6.0 Description The issue allows unauthorized attackers to execute arbitrary SQL commands remotely via the s parameter in the Topics Counting feature. This enables attackers to potentially access or manipulate sensitive data...

Roothub SQL注入漏洞

Roothub is a forum system developed using SSM and MySQL.Roothub suffers from a SQL injection vulnerability, which stems from the lack of validation of external input SQL statements in the s parameter of the Topics Searching feature, and can be exploited by attackers to execute illegal SQL command...

CVE-2022-27472: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

Roothub SQL注入漏洞

Roothub is a forum system developed using SSM and MySQL.Roothub is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the s parameter of the Topics Counting feature, and can be exploited by attackers to execute illegal SQL commands to steal...

PT-2022-18442

Name of the Vulnerable Software and Affected Versions Roothub version 2.6.0 Description The issue allows unauthorized attackers to execute arbitrary SQL commands via the s parameter in the Topics Searching feature. This enables remote exploitation. Recommendations For Roothub version 2.6.0,...