SourceCodester Simple Realtime Quiz System SQL Injection Vulnerability

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Simple Realtime Quiz System version 1.0, which stems from an SQL injection vulnerability in the quiz parameter of the /quizboard.php file...

SourceCodester Tracking Monitoring Management System SQL Injection Vulnerability

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the...

SourceCodester Tracking Monitoring Management System SQL Injection Vulnerability

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

CVE-2024-7320

A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attac...

Xinhu RockOA SQL Injection Vulnerability

Xinhu RockOA is an office OA system of China Xinhu Company. A SQL injection vulnerability exists in Xinhu RockOA version 2.6.2, which originates from the parameter nickName in the function dataAction /webmain/task/openapi/openmodhetongAction.php, which can lead to SQL injection...

Establishment Billing Management System security vulnerabilities

Establishment Billing Management System is a billing management system by oretnom23 individual developer. A security vulnerability exists in Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

OpenResty SQL Injection Code Execution File Upload

The vulnerability of the OpenResty web platform’s control panel for the Linux server 1Panel relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and upload arbitrary files...

Establishment Billing Management System SQL Injection Vulnerability

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

Establishment Billing Management System SQL Injection Vulnerability

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

HUSKY Plugin SQL Injection

The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce previously WOOF of the WordPress content management system – is related to the lack of protection for the SQL query structure when processing the woofauthor parameter. Exploiting this vulnerability allows an...

CVE-2024-6699

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection. This issue affects Mikafon MA7: from v3.0 before v3.1...

Hewlett Packard Enterprise ClearPass Policy Manager security vulnerability

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager that originates from a vulnerability that could allow an authenticate...

SiberianCMS SQL Injection Vulnerability

SiberianCMS is an enterprise-level content management system that offers a variety of features for creating and managing web content. SiberianCMS suffers from a SQL injection vulnerability that originates from the system failing to properly neutralize special elements in SQL commands. The...

CVE-2024-37858

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

CVE-2024-7191

A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/getbalance.php. The manipulation of the argument studentid leads to sql injection. The attack may be launched...

Complaint Report Management System SQL Injection Vulnerability

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Complaints Report Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

KB5005226 - Cumulative Update 26 for SQL Server 2017

KB5005226 - Cumulative Update 26 for SQL Server 2017 Release Date: September 14, 2021 Version: 14.0.3411.3 Summary This article describes Cumulative Update package 26 CU26 for Microsoft SQL Server 2017. This update contains 22 fixes that were issued after the release of SQL Server 2017 Cumulative...

KB5004524 - Cumulative Update 12 for SQL Server 2019

KB5004524 - Cumulative Update 12 for SQL Server 2019 Release Date: August 04, 2021 Version: 15.0.4153.1 Summary This article describes Cumulative Update package 12 CU12 for Microsoft SQL Server 2019. This update contains 30 fixes that were issued after the release of SQL Server 2019 Cumulative...

Tianchoy Blog SQL Injection Vulnerability

Tianchoy Blog is a blog site of Tianchoy personal developer. A SQL injection vulnerability exists in Tianchoy Blog version 1.8.8 and earlier versions, which stems from an incorrect operation of the search parameter that can lead to sql injection...

KB5001228 - Cumulative Update 24 for SQL Server 2017

KB5001228 - Cumulative Update 24 for SQL Server 2017 Release Date: May 10, 2021 Version: 14.0.3391.2 Summary This article describes Cumulative Update package 24 CU24 for Microsoft SQL Server 2017. This update contains 24 fixes that were issued after the release of SQL Server 2017 Cumulative Updat...