15475 matches found
CVE-2025-10460: Improper Input Validation
A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...
CVE-2025-63718: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability exists in the SourceCodester PQMS Patient Queue Management System 1.0 in the apipatientschedule.php endpoint. The appointmentID parameter is not properly sanitized, allowing attackers to execute arbitrary SQL commands...
CVE-2025-64114: Improper Neutralization of Special Elements used in an SQL Command
ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - 151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Custom Fields plugin. The vulnerabilities require the Custom...
CVE-2020-36869: Improper Neutralization of Special Elements used in an SQL Command
Nagios XI versions prior to 5.7.5 contain a SQL injection vulnerability in the SNMP Trap Interface edit page. Exploitation requires an account with administrative privileges to access the affected interface. A user with administrative access could supply crafted input that is not properly...
Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality
An authenticated SQL injection vulnerability exists in the member assignment data retrieval functionality of Admidio. Any authenticated user with permissions to assign members to a role such as an administrator can exploit this vulnerability to execute arbitrary SQL commands. This can lead to a...
PT-2025-42668
Name of the Vulnerable Software and Affected Versions MediaWiki Cargo extension versions 1.39, 1.43, and 1.44 Description A flaw exists in the MediaWiki Cargo extension that allows for SQL Injection. This occurs due to improper neutralization of special elements within SQL commands. The issue cou...
CVE-2025-62422: Improper Neutralization of Special Elements used in an SQL Command
DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in...
CVE-2025-56700: Improper Neutralization of Special Elements used in an SQL Command
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
CVE-2025-11188 CVE-2025-11188
The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database...
EUVD-2012-0929
Malware in sbrugna...
EUVD-2009-2398
Malware in sbrugna...
EUVD-2005-1224
Malware in sbrugna...
EUVD-2008-6611
Malware in sbrugna...
EUVD-2008-5016
Malware in sbrugna...
EUVD-2005-4190
Malware in sbrugna...
EUVD-2010-4950
Malware in sbrugna...
EUVD-2010-1369
Malware in sbrugna...
EUVD-2008-5891
Malware in sbrugna...