265409 matches found
Adobe Campaign Classic SQL injection vulnerability
Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers to execute arbitrary SQL commands. Such actions may result in privilege...
CVE-2026-104354: Improper Neutralization of Special Elements used in an SQL Command
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to...
CVE-2026-117514: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in oretnom23 php-travel-agency-system. This issue affects some unknown processing of the file admin/customerdetail.php of the component Admin Record Pages. The manipulation of the argument costomerid/ticketid/empid/salaryid/pageid leads to sql injection. It is...
Adobe Campaign Classic SQL injection vulnerability
Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers with elevated privileges to execute arbitrary code within the context of the...
Adobe Campaign Classic SQL injection vulnerability
Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing attackers with low privileges to execute arbitrary code within the context of the...
Oretnom23 Online Travel Agency System input validation error vulnerability
The Oretnom23 Online Travel Agency System has a security vulnerability. This vulnerability stems from improper handling of parameters such as name, company, email, topic, phone, and comments within the Contact Form Handler component in the contactinsert.php file, potentially leading to SQL...
PT-2026-126702
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthoriz...
NVIDIA NeMo Agent ToolKit SQL injection vulnerability
Versions 1.4 through 1.6 of the NVIDIA NeMo Agent ToolKit contain an SQL injection vulnerability. This vulnerability may lead to data tampering, denial of service, and information leakage...
YesWiki SQL injection vulnerability
Versions of YesWiki prior to 4.7.0 contain an SQL injection vulnerability. This flaw arises because AclService::updateRequestWithACL inserts usernames into the SQL LIKE pattern without escaping the and % wildcards. As a result, it becomes possible to read ACLs bypassed. Attackers can exploit this...
OpenPanel SQL injection vulnerability
Versions of OpenPanel prior to 3.0.0 contain an SQL injection vulnerability. This vulnerability arises when unescaped profile filter names are inserted into JOIN subqueries. As a result, authenticated users can exploit specially crafted filter names containing trailing comments to bypass the...
OpenPanel SQL injection vulnerability
Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This flaw stems from the lack of session and project access checks on the projectId parameter in the /live/visitors/:projectId WebSocket. It is susceptible to ClickHouse SQL injection attacks, potentially allowing remote...
PT-2026-126704
Adobe Campaign Classic ACC is affected by an Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary SQL...
Tanium Provision SQL injection vulnerability
Versions prior to Tanium Provision 1.17.150, versions prior to 1.23.161, and versions prior to 1.24.199 contain an SQL injection vulnerability. This vulnerability stems from susceptibility to SQL injection attacks...
Adobe Campaign Classic SQL injection vulnerability
Adobe Campaign Classic versions 7.4.4 build 9402 and earlier contain an SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, potentially allowing unauthorized attackers with limited privileges to bypass security measures and gain...
PT-2026-127158
Tanium addressed a SQL injection vulnerability in Patch...
PT-2026-127187
Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 22.0.5 Dolibarr versions prior to 23.0.2 Description A SQL injection issue exists in the Third Party company update functionality. The application concatenates the localtax1 value and localtax2 value properties into ...
OpenPanel SQL injection vulnerability
Versions prior to OpenPanel 3.0.0 contain an SQL injection vulnerability. This vulnerability stems from profileColumnAccess in cohort.service.ts failing to escape profile filter column names, allowing members with read access to projects to perform SQL injection by submitting a cohort.preview...
Oretnom23 Online Travel Agency System input validation error vulnerability
The Oretnom23 Online Travel Agency System has a security vulnerability stemming from improper handling of the Search parameter in the traceapplication.php file, which may lead to SQL injection...
Oretnom23 Online Travel Agency System input validation error vulnerability
The Oretnom23 Online Travel Agency System has a security vulnerability. This vulnerability stems from improper handling of the parameters customerid, ticketid, empid, salaryid, and pageid in the admin/customerdetail.php file within the Admin Record Pages component, potentially leading to SQL...