The vulnerability of the input function in the EFence application system for managing corporate mobile devices allows a hacker to execute arbitrary commands and gain access to read, modify, or delete data.

The vulnerability of the input function in the EFence application’s corporate mobile device management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary commands and gain access to read, modify, ...

The vulnerability of the implementation of the pages/edit_fields/9_ajax/add_keyword.php script of the Digital Assets Management System ResourceSpace allows a perpetrator to gain unauthorized access to protected information and execute arbitrary code.

The vulnerability of the pages/editfields/9ajax/addkeyword.php implementation of the ResourceSpace digital asset management system lies in the lack of measures taken to protect the SQL query structure during the processing of the k parameter. Exploiting this vulnerability can allow an attacker,...

Sql injection

In Administrate rubygem before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the direction parameter and bypass ActiveRecord...

Sort order SQL injection in Administrate

In Administrate rubygem before version 0.13.0, when sorting by attributes on a dashboard, the direction parameter was not validated before being interpolated into the SQL query. This could present a SQL injection if the attacker were able to modify the direction parameter and bypass ActiveRecord...

The vulnerability of the SAP Business Intelligence software platform, related to the lack of protective measures for SQL queries, allows attackers to alter data, obtain confidential information, cause service failures due to data deletion, or execute administrative operations.

The vulnerability of the SAP Business Intelligence business process management software platform lies in the lack of protective measures for SQL queries. Exploiting this vulnerability allows a malicious actor to modify data, obtain confidential information, cause service failures due to data...