14 matches found
CVE-2022-37204
CVE-2022-37204 CVE-2022-37204 POC Descrizione suggerita RISERVATO JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Informazioni aggiuntive https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Tipo di vulnerabilità SQL Injection Fornitore del prodotto il gruppo di...
CVE-2022-37202
CVE-2022-37202 CVE-2022-37202 POC Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Tipo di vulnerabilità SQL Injection Fornitore del prodotto il gruppo di sviluppo Codice base del prodotto affetto https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Componente affetto...
CVE-2022-37210
CVE-2022-37210 CVE-2022-37210 POC Descrizione suggerita JFinal CMS 5.1.0 è affetto da: SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ciascuna usa il proprio metodo di concatenazione SQL, causando SQL injection. Informazioni aggiuntive...
CVE-2022-37205
CVE-2022-37205 CVE-2022-37205 POC Descrizione suggerita RISERVATO JFinal CMS 5.1.0 è affetto da: SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ciascuna usa il proprio metodo di concatenazione SQL, causando SQL injection. Informazioni aggiuntive...
CVE-2022-37208
37208 CVE-2022-37208 Descrizione suggerita JFinal CMS 5.1.0 è vulnerabile a SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ciascuna utilizza la propria metodo di concatenazione SQL, risultando in SQL injection. Informazioni aggiuntive...
CVE-2022-37209
CVE-2022-37209 CVE-2022-37209 POC Vorgeschlagene Beschreibung JFinal CMS 5.1.0 ist anfällig für SQL-Injection. Diese Schnittstellen verwenden nicht dieselbe Komponente, haben auch keine Filter, sondern jede verwendet ihre eigene SQL-Verkettungsmethode, was zu SQL-Injection führt. Zusätzliche...
CVE-2022-37207
CVE-2022-37207 CVE-2022-37207 POC Descrizione suggerita JFinal CMS 5.1.0 è affetto da: SQL Injection. Queste interfacce non utilizzano lo stesso componente, né hanno filtri, ma ognuna usa il proprio metodo di concatenazione SQL, causando SQL injection. Informazioni aggiuntive...
CVE-2022-37206
CVE-2022-37206 CVE-2022-37206 POC अतिरिक्त जानकारी https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md भेद्यता प्रकार SQL इंजेक्शन उत्पाद का विक्रेता डेवलपमेंट ग्रुप प्रभावित उत्पाद कोड बेस https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 प्रभावित घटक ये...
CVE-2022-37203
CVE-2022-37203 إثبات المفهوم لـ CVE-2022-37203 معلومات إضافية https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql3.md نوع الثغرة حقن SQL البائع مجموعة التطوير قاعدة الكود المتأثرة https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 المكون المتأثر لا تستخدم هذه...
CVE-2026-33991 WeGIA has SQL Injection in deletar_tag.php
WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file html/socio/sistema/deletartag.php uses extract$REQUEST on line 14 and directly concatenates the $idtag variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches t...
CVE-2022-37208
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Sql injection
JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...
Advantech R-SeeNet application multiple SQL injection vulnerabilities in the 'company_list' page
Summary Multiple exploitable SQL injection vulnerabilities exist in the ‘companylist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. However, the high...