15508 matches found
WordPress Duplicate Page Plugin SQL Injection
An SQL injection vulnerability has been reported in WordPress Duplicate Page Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PT-2019-9192
Name of the Vulnerable Software and Affected Versions ChronoScan versions 1.5.4.3 and earlier Description The issue allows an unauthenticated attacker to execute arbitrary SQL commands via the wcr machineid cookie. This enables the attacker to manipulate the database, potentially leading to data...
CVE-2018-16116
SQL injection vulnerability in AccountStatus.jsp in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary SQL commands via the "username" GET parameter...
PT-2019-9220
Name of the Vulnerable Software and Affected Versions Sophos XG firewall version 17.0.8 MR-8 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. This is achieved via the username GET parameter in the AccountStatus.jsp file of the Admin Portal...
CVE-2019-12149
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...
CVE-2019-12149
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...
CVE-2018-11801
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a mcenter data related table...
Sql injection
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a mcenter data related table...
CVE-2018-11801
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a mcenter data related table...
PT-2019-12661
Name of the Vulnerable Software and Affected Versions silverstripe/restfulserver module versions 1.0.x through 1.0.8 silverstripe/restfulserver module versions 2.0.x through 2.0.3 silverstripe/restfulserver module versions 2.1.x through 2.1.1 silverstripe/registry module versions 2.1.x through...
CVE-2019-12149: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...
PT-2019-8805
Name of the Vulnerable Software and Affected Versions Apache Fineract versions prior to 1.3.0 Description The issue allows attackers to execute arbitrary SQL commands via a query on a m center data related table. This is a SQL injection vulnerability. Recommendations For versions prior to 1.3.0,...
CVE-2018-11801: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a mcenter data related table...
CVE-2019-12196
A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter...
CVE-2019-12196: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in /client/api/json/v2/nfareports/compareReport in Zoho ManageEngine NetFlow Analyzer 12.3 allows attackers to execute arbitrary SQL commands via the DeviceID parameter...
Cybozu Garoon 4.x <= 4.10.0 Multiple Vulnerabilities
Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...
Advantech WebAccess < 8.3.5 Multiple Vulnerabilities (ICSA-19-024-01)
Binary data 700722.prm...
Nagios XI SQL Injection Vulnerability (CNVD-2019-15672)
Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A SQL injection vulnerability exists in Nagios XI version 5.6.1, which can be exploited by attackers to...