CVE-2018-20505

Multiple flaws were found in sqlite. An attacker having the ability to run arbitrary SQL commands could use this flaw to execute arbitrary code with the permission of the user running the sqlite application...

PT-2019-12155

Name of the Vulnerable Software and Affected Versions Vtiger CRM versions prior to 7.1.0 hotfix3 Description The issue allows authenticated users to execute arbitrary SQL commands due to a SQL injection vulnerability. Recommendations For versions prior to 7.1.0 hotfix3, update to version 7.1.0...

CVE-2019-11057: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Vtiger CRM before 7.1.0 hotfix3 allows authenticated users to execute arbitrary SQL commands...

CVE-2019-11600

A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. The attack can be performed unauthenticated if OpenProject is configured not to require authentication for API access...

Sql injection

A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands via the id parameter. The attack can be performed unauthenticated if OpenProject is configured not to require authentication for API access...

Sql injection

SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...

CVE-2018-12295

SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...

CVE-2018-12295: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in folderViewSpecific.psp in Seagate NAS OS version 4.3.15.1 allows attackers to execute arbitrary SQL commands via the dirId URL parameter...

PT-2019-8882

Name of the Vulnerable Software and Affected Versions Seagate NAS OS version 4.3.15.1 Description The issue allows attackers to execute arbitrary SQL commands. This is achieved via the dirId URL parameter in the folderViewSpecific.psp file. Recommendations For Seagate NAS OS version 4.3.15.1, avo...

CVE-2015-5463

AxiomSL's Axiom java applet module used for editing uploaded Excel files and associated Java RMI services 9.5.3 and earlier allows remote attackers to 1 access data of other basic users through arbitrary SQL commands, 2 perform a horizontal and vertical privilege escalation, 3 cause a Denial of...

PT-2019-7192

Name of the Vulnerable Software and Affected Versions AxiomSL's Axiom java applet module versions 9.5.3 and earlier Description The issue allows remote attackers to access data of other basic users through arbitrary SQL commands, perform horizontal and vertical privilege escalation, cause a Denia...

CVE-2019-9165: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id...

CVE-2019-9204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Nagios IM component of Nagios XI before 2.2.7 allows attackers to execute arbitrary SQL commands...

CVE-2018-20556

SQL injection vulnerability in Booking Calendar plugin 8.4.3 for WordPress allows remote attackers to execute arbitrary SQL commands via the bookingid parameter...

CVE-2018-20556

CVE-2018-20556 is a SQL injection vulnerability in the WordPress plugin Booking Calendar (version 8.4.3). The flaw allows an attacker to manipulate the booking_id parameter to execute arbitrary SQL commands on the underlying database, potentially exposing data. Multiple connected sources corrobor...

RockOA SQL Injection Vulnerability

ROCKOA Xinhuo office system is a free and open source OA collaborative office system for small and medium-sized enterprises. RockOA 1.8.7 SQL injection vulnerability exists. The vulnerability stems from the webmain/webmainAction.php publictreestore method using the pidfields and idfields paramete...

Sql injection

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the productoption parameter...

Joomla DT Register 4.0.3 SQL Injection

Exploit Title : Joomla DT Register Components 4.0.3 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 14/02/2019 Vendor Homepage : dthdevelopment.com Software Download Link :...

Joomla ABook Alexandria Book Library 3.1.4 SQL Injection

Exploit Title : Joomla ABook Alexandria Book Library 3.1.4 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 12/02/2019 Vendor Homepage : alexandriabooklibrary.org Software Download Link : alexandriabooklibrary.org/en/downloads/18-components.html...

Joomla JVLE JV-LinkExchanger 3.2 SQL Injection

Exploit Title : Joomla JVLE JV-LinkExchanger 3.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 10/02/2019 Vendor Homepage : jv-extensions.com Software Download Link : jv-extensions.com/customer-orders-and-downloads Software Information Link :...