CVE-2020-2934

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands...

CVE-2020-2875

A flaw was found in the mysql-connector-java package. A complicated attack against the mysql Connector/J allows attackers on the local network to interfere with a user's connection and insert unauthorized SQL commands in MySQL Connectors and other products...

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

Sql injection

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

Sql injection

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

PT-2020-6838

Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 10.14 PostgreSQL versions prior to 11.9 PostgreSQL versions prior to 12.4 Description The issue is related to the improper sanitization of the search path during logical replication in PostgreSQL, allowing an...

Symphony CMS SQL Injection (CVE-2013-2559)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WatermelonDB SQL Injection Vulnerability

WatermelonDB is the next generation React database for building powerful React and React Native applications that can scale from hundreds to tens of thousands of records while remaining fast. A SQL injection vulnerability in WatermelonDB versions prior to 0.15.1 and prior to 0.16.2, which stems...

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

PT-2020-18553

Name of the Vulnerable Software and Affected Versions Paid Memberships versions prior to 2.3.3 Description The issue allows an attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors. This can be exploited by sending malicious input to vulnerable parameters,...

CVE-2020-5579: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

vBulletin nodeId SQL Injection (CVE-2020-12720)

An SQL injection vulnerability exists in vBulletin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress LearnDash Plugin SQL Injection (CVE-2020-6009)

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

WordPress LearnPress Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...

Sql injection

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

EUVD-2020-29485

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

CVE-2020-8637: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in TestLink 1.9.20 allows attackers to execute arbitrary SQL commands in dragdroptreenodes.php via the nodeid parameter...

PT-2020-20248

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description A SQL injection issue allows attackers to execute arbitrary SQL commands in the "planUrgency.php" file via the urgency parameter. Recommendations For TestLink version 1.9.20, consider restricting access to t...