Simple Subscription Website SQL Injection Vulnerability

Simple Subscription Website is a web-based application. SourceCodester Simple Subscription Website 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via login...

Ericsson Network Location MPS GMPC21 command injection vulnerability

Ericsson Network Location Mps Gmpc21 is a network mobile positioning system from Ericsson, Sweden. Ericsson Network Location MPS GMPC21 suffers from a command injection vulnerability that arises from the lack of filtering and escaping of SQL statements in the file name query in the export functio...

Simple Cashiering System SQL Injection Vulnerability

Simple Cashiering System is a simple open source cashiering system by Carlo Montero personal developer. It is used to help businesses manage their daily transactions. Simple Cashiering System suffers from an SQL injection vulnerability that stems from a lack of filtering and escaping of...

CVE-2021-41676

An SQL Injection vulnerabilty exists in the oretnom23 Pharmacy Point of Sale System 1.0 in the login function in actions.php...

Yonyou TurboCrm SQL Injection Vulnerability

Yonyou TurboCrm is a customer relationship management system from China's UFIDA Network Technology Yonyou. Yonyou TurboCRM.via suffers from a SQL injection vulnerability that allows an attacker to obtain sensitive database information via the orgcode parameter in changepswd.php...

SQLite idxGetTableInfo Buffer Overflow DoS

The vulnerability of the idxGetTableInfo function in the command-line component of the embedded SQLite database relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures by executing a specially crafted SQL quer...

CVE-2020-24932

An SQL Injection vulnerability exists in Sourcecodester Complaint Management System 1.0 via the cid parameter in complaint-details.php...

openSIS SQL Injection

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the username parameter...

CVE-2021-37371

Online Student Admission System 1.0 is affected by an unauthenticated SQL injection bypass vulnerability in /admin/login.php...

Media Streaming add-on SQL Injection

The vulnerability of the Media Streaming add-on, a multimedia file streaming application, and the Multimedia Console console is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remote...

CVE-2021-42333

The Easytest contains SQL injection vulnerabilities. After obtaining user’s privilege, remote attackers can inject SQL commands into the parameters of the learning history page to access all database and obtain administrator permissions...

Aruba ClearPass Policy Manager SQL Injection Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.A SQL injection vulnerability exists in Aruba ClearPass Policy Manager, which stems from a remote SQL injection vulnerability in Aruba ClearPass Policy Manager. ...

EasyTest SQL injection vulnerabilities

Easytest is an online learning quiz platform of China's Hua Ju Digital Technology, Inc. Easytest is vulnerable to SQL injection, which can be exploited by attackers to inject SQL commands into the parameters of the learning history page after gaining user privileges to access all databases and ga...

Enalean Tuleap Open Alm SQL Injection Vulnerability

Enalean Tuleap Open Alm is a free and open source tool from Enalean France. End-to-end traceability for application and system development. A SQL injection vulnerability exists in Community Edition version 11.16.99.173 and Enterprise Edition versions prior to 11.16-6 and 11.15-8 of Enalean Tuleap...

ZZCMS SQL Injection Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China.ZZCMS version 2019 is vulnerable to a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the id parameter on the application's /dl/dlprint.php page. An attacker could u...

ZOHO ManageEngine OpManager has a SQL injection vulnerability

ZOHO ManageEngine OpManager is an end-to-end integrated network management software that enables comprehensive, visual, unified and centralized monitoring and management of IT infrastructure, including network devices, servers, hosts, WAN links, applications and services, within an enterprise...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

Open Solutions For Education’s openSIS SQL injection vulnerability

openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the ADDRCONTUSRN, ADDRCONTPSWD, SECNCONTUSRN, SECNCONTPSWD parameters in HoldAddressFields.php in openSIS version 8.0. An attacker can exploit this vulnerability to obtain...

rConfig SQL injection vulnerability

rConfig is an open source network device configuration management utility . A SQL injection vulnerability exists in rConfig version 3.9.6. An attacker can exploit this vulnerability to upload a webshell to the server and access it remotely...

Subrion CMS SQL Injection Vulnerability

Subrion is a powerful and easy-to-use PHP content management system with powerful features such as full-source editing, per-page permissions, user activity monitoring, etc. A SQL injection vulnerability exists in visual-mode in Subrion version 4.2.1. An attacker can use this vulnerability to obta...