Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS via maliciously crafted SQL queries made via editing the Database File, it is possible to query a record and leak subsequent bytes of memory that extend beyond the record, which could let a malicious user obtain...

EasyCMS SQL Injection Vulnerability

EasyCMS is a Php-based website builder from the EasyCMS community. A SQL injection vulnerability exists in EasyCMS, which stems from the product ArticlemAction.class.php file not effectively handling special characters in user-supplied search term data. An attacker can execute malicious SQL...

Metinfo MetInfo SQL Injection Vulnerability

MetInfo is a content management system CMS developed using PHP and Mysql. A SQL injection vulnerability exists in Metinfo, which stems from the product's failure to secure the special characters in the doModify parameter in the languagegeneral.class.php file. An attacker could exploit this...

Tongda2000 SQL injection vulnerability

A SQL injection vulnerability exists in Tongda2000, a web-based intelligent office system from China Tongda, which originates from the dname parameter in the product's exportdata.php file that does not securely handle special characters in user input data. An attacker can execute malicious SQL...

CVE-2021-34235

Tokheim Profleet DiaLOG 11.005.02 is affected by SQL Injection. The component is the FieldUserLogin parameter on the logon page...

TSG Tokheim Profleet DiaLOG Fuel Management System SQL Injection Vulnerability

TSG Tokheim Profleet DiaLOG Fuel Management System is a fuel management system from TSG UK.A SQL injection vulnerability exists in TSG Tokheim Profleet DiaLOG Fuel Management System, which can be exploited by attackers to cause remote code execution as root user...

PT-2022-1665 · Microsoft · Sql Server

Name of the Vulnerable Software and Affected Versions: SQL Server for Linux Containers affected versions not specified Description: The issue is related to insecure privilege management in Microsoft SQL Server for Linux. Exploitation of this issue may allow an attacker to elevate their privileges...

phpipam Arbitrary SQL Injection

The vulnerability of the app/admin/routing/edit-bgp-mapping-search.php web application for managing IP addresses in phpipam lies in the lack of measures taken to protect the SQL query structure when processing the “subnet” parameter. Exploiting this vulnerability allows a malicious actor to execu...

Synology DiskStation Manager SQL injection vulnerability

Synology DiskStation Manager DSM is an operating system used on network storage servers NAS by Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in Synology DiskStation Manager, which stems from the failure of the product's Log Management function to handle special characters i...

GLPI SQL Injection

The vulnerability of the GLPI system’s handling of requests and incidents is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Emlog SQL injection vulnerability

Emlog is a PHP and MySQL based CMS website builder by the individual developer of Emlog. Emlog has a SQL injection vulnerability, which originates from the discovery that Emlog v6.0 contains a SQL injection vulnerability via the $TagID parameter of getblogidsfromtagid...

Victor CMS SQL injection vulnerability

Victor CMS is an open source content management system from the individual developers of Victor Alagwu in Nigeria.A security vulnerability exists in Victor CMS, which stems from the lack of validation of externally entered SQL statements in the database-based application. An attacker could exploi...

DEBIAN-CVE-2021-46667

MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...

Elite Graphix Elite Cms has a SQL injection vulnerability

Elite Graphix Elite Cms is a web content management written in Php language from Elite Graphix India. platform for storing and organizing information and documents. Elite Graphix Elite Cms suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL...

WordPress plugin: SQL injection vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language.The WordPress Perfect Survey plugin has a SQL injection vulnerability in versions prior to 1.5.2, which stems from the lack of validation of externally entered SQL statements in database-based...

Victor CMS SQL injection vulnerability

Victor CMS is an open source content management system from the individual developers of Victor Alagwu in Nigeria. victor CMS has a SQL injection vulnerability in v1.0, which stems from the lack of validation of externally entered SQL statements in database-based applications. An attacker could...

showdoc SQL injection vulnerability

showdoc is open source a great tool for IT teams to share documents online. A SQL injection vulnerability exists in showdoc versions prior to 2.10.3, which stems from a lack of validation of the uid parameter of showdoc against externally entered SQL statements. An attacker can exploit this...

Online Payment Hub SQL Injection Vulnerability

Online Payment Hub is an online payment hub for Carlo Montero personal developers. The Online Payment Hub is vulnerable to SQL injection due to a lack of filtering and escaping of SQL data in Login.php, which could be exploited to execute arbitrary SQL commands via the username parameter...

CVE-2021-46308

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...

Kabirkhyrul Hospital Management System SQL Injection Vulnerability

Hospital Managment System HMS is a computer or web-based system that helps manage the operations of a hospital or any medical facility.Hospital Managment System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands...