2176 matches found
Detecting and Mitigating SQL Injection Vulnerabilities in Web Applications
SQL injection SQLi remains a critical vulnerability in web applications, enabling attackers to manipulate databases through malicious inputs. Despite advancements in mitigation techniques, the evolving complexity of web applications and attack strategies continues to pose significant risks. This...
CVE-2025-48999
DataEase is an open source business intelligence and data visualization tool. A bypass of CVE-2025-46566's patch exists in versions prior to 2.10.10. In a malicious payload, getUrlType retrieves hostName. Since the judgment statement returns false, it will not enter the if statement and will not ...
DataEase 安全漏洞
DataEase is an open source data visualization and analysis tool from DataEase Open Source. It is used to help users quickly analyze data and gain insight into business trends for business improvement and optimization. A security vulnerability exists in DataEase versions prior to 2.10.10 that stem...
PT-2025-23532 · Unknown · Cloudclassroom-Php Project
Name of the Vulnerable Software and Affected Versions: CloudClassroom-PHP-Project version 1.0 Description: A SQL injection vulnerability exists in the registrationform endpoint of CloudClassroom-PHP-Project due to improper input validation, allowing attackers to inject SQL queries. The pass...
PHPGurukul Small CRM 注入漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter aremark in the file /admin/manage-tickets.php. An attacker can exploit this vulnerability ...
CVE-2025-48701
openDCIM through 23.04 allows SQL injection in peopledepts.php because prepared statements are not used...
CVE-2024-57618
An issue in the bindcolexp component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57626
An issue in the matjoin2 component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57627
An issue in the gccol component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57629
An issue in the tailtype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57625
An issue in the mergetablepruneandunionize component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57616
An issue in the vscanf component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57622
An issue in the expbin component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57634
An issue in the expcopy component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57619
An issue in the atomgetint component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57620
An issue in the trimchars component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57631
An issue in the expref component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-57628
An issue in the expvaluessetsupertype component of MonetDB Server v11.49.1 allows attackers to cause a Denial of Service DoS via crafted SQL statements...