CVE-2022-37209

CVE-2022-37209 CVE-2022-37209 POC Description suggérée JFinal CMS 5.1.0 est vulnérable à l'injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations supplémentaires...

CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Description suggérée JFinal CMS 5.1.0 est affecté par : injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations supplémentaires...

CVE-2022-37204

CVE-2022-37204 CVE-2022-37204 POC Description suggérée RESERVED JFinal CMS 5.1.0 est vulnérable à une injection SQL. Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql7.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de...

CVE-2022-37205

CVE-2022-37205 CVE-2022-37205 POC Description suggérée RESERVED JFinal CMS 5.1.0 est affecté par : Injection SQL. Ces interfaces n'utilisent pas le même composant, ni n'ont de filtres, mais chacune utilise sa propre méthode de concaténation SQL, ce qui entraîne une injection SQL. Informations...

CVE-2022-37202

CVE-2022-37202 CVE-2022-37202 POC Description suggérée JFinal CMS 5.1.0 est vulnérable aux injections SQL. Type de vulnérabilité Injection SQL Fournisseur du produit le groupe de développement Base de code du produit affecté https://github.com/jflyfox/jfinalcms - JFinal CMS 5.1.0 Composant affect...

CVE-2022-37207

CVE-2022-37207 CVE-2022-37207 POC Description suggérée JFinal CMS 5.1.0 est affecté par : injection SQL. Ces interfaces n'utilisent pas le même composant, ni ne possèdent de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations...

CVE-2022-37206

CVE-2022-37206 CVE-2022-37206 POC Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql2.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de développement Code de base du produit affecté https://github.com/jflyfox/jfinalcms -...

CVE-2022-37208

37208 CVE-2022-37208 Description suggérée JFinal CMS 5.1.0 est vulnérable aux injections SQL. Ces interfaces n'utilisent pas le même composant, ne possèdent pas de filtres, mais chacune utilise sa propre méthode de concaténation SQL, entraînant une injection SQL. Informations supplémentaires...

CVE-2022-37203

CVE-2022-37203 CVE-2022-37203 POC Informations supplémentaires https://github.com/AgainstTheLight/someEXPofjfinalcms/blob/main/jfinalcms/sql3.md Type de vulnérabilité Injection SQL Vendeur du produit le groupe de développement Code base du produit affecté https://github.com/jflyfox/jfinalcms -...

CVE-2026-76428

A SQL injection vulnerability in the REST APIs of Cisco ISE and Cisco ISE-PIC stems from certain parameters being concatenated directly into SQL clauses without parameterization. An authenticated remote attacker with valid administrative credentials can send a crafted request to read information ...

CVE-2026-33991 WeGIA has SQL Injection in deletar_tag.php

WeGIA is a web manager for charitable institutions. Prior to version 3.6.7, the file html/socio/sistema/deletartag.php uses extract$REQUEST on line 14 and directly concatenates the $idtag variable into SQL queries on lines 16-17 without prepared statements or sanitization. Version 3.6.7 patches t...

CVE-2022-37208: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37208

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37209: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37205: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37203: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

Sql injection

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

CVE-2022-37207: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is affected by: SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its own SQL concatenation method, resulting in SQL injection...

Advantech R-SeeNet application multiple SQL injection vulnerabilities in the 'company_list' page

Summary Multiple exploitable SQL injection vulnerabilities exist in the ‘companylist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request can lead to SQL injection. An attacker can make authenticated HTTP requests to trigger these vulnerabilities. However, the high...