15467 matches found
WordPress plugin Smart Manager SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...
CVE-2025-23218
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the WeGIA application, specifically in the adicionarespecie.php endpoint. This vulnerability allows attackers to execute arbitrary SQL commands ...
PT-2025-4499
Name of the Vulnerable Software and Affected Versions Nabaraj Chapagain NC Wishlist for Woocommerce versions 1.0.1 and below Description The issue is related to an improper neutralization of special elements used in an SQL command, which allows SQL injection. This means that attackers can...
SQL Injection
Django is vulnerable to SQL injection. The vulnerability exists due to the improper handling of untrusted data in the django.db.models.fields.json.HasKey lookup when used with an Oracle database, allowing attackers to execute arbitrary SQL commands...
CVE-2024-54811
A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter...
CVE-2024-54811
A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter...
CVE-2024-54811
The PHPGurukul Park Ticketing Management System v1.0 is vulnerable to a SQL injection flaw in the /index.php file. The root cause is a lack of validation for externally entered SQL statements, which allows an attacker to execute arbitrary SQL commands via the "login" parameter . This could lead t...
CVE-2024-54921
A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...
CVE-2024-54923
A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...
CVE-2024-54922
A SQL Injection vulnerability exists in the kashipara E-learning Management System v1.0 within the /admin/edit_user.php file. Remote attackers can exploit the firstname, lastname, and username parameters to execute arbitrary SQL commands, leading to unauthorized database access and the exposure o...
CVE-2024-54931
A SQL Injection was found in /admin/deleteevent.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the id parameter...
Exploit for CVE-2024-42327
CVE-2024-42327 - Zabbix SQL Injection Vulnerability SQLI No...
CVE-2024-53438: Improper Neutralization of Special Elements used in an SQL Command
EventAttendance.php in ChurchCRM 5.7.0 is vulnerable to SQL injection. An attacker can exploit this vulnerability by manipulating the 'Event' parameter, which is directly interpolated into the SQL query without proper sanitization or validation, allowing attackers to execute arbitrary SQL command...
CVE-2024-50970
A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2024-50971
A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...
CVE-2024-50972
CVE-2024-50972 affects Itsourcecode Construction Management System 1.0. A SQL injection flaw exists in printtool.php that allows remote attackers to execute arbitrary SQL commands via the borrow_id parameter. The issue is supported by multiple sources (NVD, Red Hat, CNNVD, PT Security, CIRCL, CVE...
CVE-2024-50971
A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...
CVE-2024-50971
CVE-2024-50971 affects Itsourcecode Construction Management System 1.0. A SQL injection in the print.php endpoint (parameter: map_id) enables remote attackers to execute arbitrary SQL commands. The vulnerability is described with high impact on confidentiality, integrity, and availability in the ...