The vulnerability of the my_decimal::operator database component, which allows a hacker to trigger a service failure.

The vulnerability of the mydecimal::operator component of the MariaDB database lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to trigger service failures through a specially crafted SQL query...

The vulnerability of the FUEL CMS content management system lies in the lack of protection for SQL query structures, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the FUEL CMS content management system lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through the col parameter in...

PT-2022-4194

Name of the Vulnerable Software and Affected Versions Photonic Plugin affected versions not specified Description The issue is related to the lack of protection against SQL query structure exploitation in the Photonic Plugin. This could allow a remote attacker to put the database into a sleeping...

PT-2022-3400

Name of the Vulnerable Software and Affected Versions Online Fire Reporting System version 1.0 Description The issue is related to a lack of protection against SQL query structure exploitation. An attacker can execute arbitrary SQL queries via the "/ofrs/admin/?page=requests/manage request&id=" A...

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the NamesList.php parameter...

PT-2021-7464

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 3.1.0 through 3.1.4 FortiSandbox versions 3.2.0 through 3.2.2 Description The issue is related to a lack of protection against SQL query structure attacks in the MTA adapter module for email message checking and the...

PT-2021-3360

Name of the Vulnerable Software and Affected Versions 74cms version 3.2.0 Description The issue is related to a lack of protection against SQL query structure attacks in the plus/ajax street.php component of the 74cms system. This can be exploited by a remote attacker to execute arbitrary SQL...

PT-2021-3358

Name of the Vulnerable Software and Affected Versions 74cms version 3.2.0 Description The issue is related to a lack of protection against SQL query structure exploitation in the ajax officebuilding.php component of the 74cms system. This can allow a remote attacker to execute arbitrary SQL queri...

PT-2021-4024

Name of the Vulnerable Software and Affected Versions Centreon versions prior to 20.04.14 Centreon versions prior to 20.10.8 Centreon versions prior to 21.04.2 Description The issue is related to a lack of protection against SQL query structure exploitation in the MediaWiki script used by Centreo...

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

The vulnerability of the KTS web interface “Mayak,” related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the KTS “Lighthouse” web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted HTTP POST request...

PT-2020-5327

Name of the Vulnerable Software and Affected Versions Zoho ManageEngine Applications Manager version 14740 and prior Description The issue is related to a lack of protection against SQL query structure exploitation in the Zoho ManageEngine Applications Manager. This can be exploited by a remote...

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform lies in the lack of security measures for the SQL query structure. This allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the VeloCloud Orchestrator component of the VMware SD-WAN programmable network management platform relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and...

The vulnerability of the Redmine project and task management web application relates to the failure to protect the SQL query structure, allowing an attacker to gain unauthorized access to protected information.

The vulnerability of the Redmine project and task management web application relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information from a remote location...

The vulnerability of the web interface of the Cisco Digital Network Architecture (DNA) Center, related to the lack of protective measures for the SQL query structure, allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco Digital Network Architecture DNA Center’s network management web interface is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerabilities of the `django.contrib.postgres_fields.HStoreField` and `django.contrib.postgres_fields.JSONField` functions in the Django framework are related to the lack of measures to protect SQL query structures. This allows attackers to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of the django.contrib.postgresfields.HStoreField and django.contrib.postgresfields.JSONField functions in the Django web development framework is related to conversion and key search errors, as well as index searching issues. Exploiting this vulnerability can allow an attacker t...

PT-2018-2138

Name of the Vulnerable Software and Affected Versions Cisco RV180W Wireless-N Multifunction VPN Router affected versions not specified Cisco Small Business RV Series RV220W Wireless Network Security Firewall affected versions not specified Description The issue is related to the lack of protectio...

PT-2017-3544

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUBackup PluginList method. This allows a remote attacker to execute arbitrary code by leveraging the la...

PT-2017-3570

Name of the Vulnerable Software and Affected Versions: Quest NetVault Backup versions 11.3.0.12 Description: The issue is related to insufficient protection of the SQL query structure in the NVBUPhaseStatus Count method. This allows a remote attacker to execute arbitrary code by exploiting the la...

The vulnerability of the Cisco Secure Access Control System’s access control system allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the Solution Engine component of the Cisco Secure Access Control System relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands using a specially crafted URL...