CVE-2025-51683

The mJobtime time tracking and job management software (version v15.7.2 ) is vulnerable to a blind SQL Injection (SQLi) . An unauthenticated attacker can execute arbitrary SQL statements by sending a crafted POST request to the /Default.aspx/update_profile_Server endpoint. This vulnerability requ...

mJobtime 安全漏洞

mJobtime is a time tracking and job management software from the US company mJobtime. A security vulnerability exists in mJobtime version v15.7.2 that originates from an unauthenticated attacker being able to execute arbitrary SQL statements via a specially crafted POST request, potentially...

PT-2025-48460

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0 Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application does not properly sanitize user-supplied input used in SQL querie...

EUVD-2025-199989

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component. The application fails to properly sanitize usersupplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the search field, an attacker can bypass...

The vulnerability of the FortiVoice corporate telephony software lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the FortiVoice corporate telephony software relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the dataexport.php web tool of the PostgreSQL administration PHP script phpPgAdmin allows a perpetrator to execute arbitrary commands.

The vulnerability of the dataexport.php web tool of the phpPgAdmin administration tool for PostgreSQL lies in the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

CVE-2025-13788

A vulnerability has been found in Chanjet CRM up to 20251106. The impacted element is an unknown function of the file /tools/upgradeattribute.php. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public a...

CVE-2025-13788

chanjet crm is affected by a SQL injection in /tools/upgradeattribute.php via the gblOrgID parameter. The vulnerability affects Chanjet CRM versions up to 20251106 (pre-51107). Root cause: input manipulation in an unknown function leads to injectable SQL. Impact is high (remote attacker, data exp...

CVE-2025-13770

CVE-2025-13770 affects WebITR by Uniong. A SQL Injection vulnerability allows authenticated remote attackers to inject arbitrary SQL and read database contents. The issue is documented with CVSS v3.1/4.0 bases (6.5 MEDIUM and 7.1 HIGH, respectively). Affected versions are not specified in the sou...

PT-2025-48320

Name of the Vulnerable Software and Affected Versions WebITR versions affected versions not specified Description WebITR developed by Uniong has a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL commands, potentially allowing them to read database contents. The...

The vulnerability of the SNMP management tool for the centralized network device and port management system Advantech iView allows a hacker to disclose protected information.

The vulnerability of the SNMP management tool for the centralized network device and port management system Advantech iView is related to the lack of measures taken to protect the SQL query structure during parameter processing. Exploiting this vulnerability allows a malicious actor to disclose t...

The vulnerability of the management tool for SNMP systems in centralized network device and port management solutions from Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of measures taken to protect the SQL query structure during the processing of the searchterm parameter. Exploiting this vulnerability allows a maliciou...

The vulnerability of the NetworksController.addNetworkAction() function in software for remote monitoring with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a intruder to gain access to database-related information.

The vulnerability of the NetworksController.addNetworkAction function in software for remote monitoring with virtual private networks like Advantech WebAccess/VPN is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor...

The vulnerability of the management tool for SNMP systems in centralized network device and port management solutions from Advantech iView allows a hacker to execute arbitrary code.

The vulnerability of the SNMP management tool for centralized network device and port management systems from Advantech iView relates to the lack of protection for the SQL query structure during the processing of the ztpsearchvalue parameter. Exploiting this vulnerability allows a malicious actor...

EUVD-2025-199829

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8...

CVE-2025-13757

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8...

Devolutions Server 安全漏洞

Devolutions Server is a security solution for managing privileged accounts and sessions, designed to help organizations centrally store and manage sensitive information such as passwords and credentials. Devolutions Server suffers from an SQL injection vulnerability that stems from the...

PT-2025-48270

Name of the Vulnerable Software and Affected Versions Devolutions Server versions through 2025.2.20 and through 2025.3.8 Description Devolutions Server is affected by a SQL Injection issue within the last usage logs functionality. The flaw allows authenticated attackers to potentially steal all...

The vulnerability of the OxygenOS operating system in OnePlus 8T and 10 Pro 5G devices, related to the failure to protect the SQL query structure, allows attackers to gain unauthorized access to confidential information.

The vulnerability of the OxygenOS operating system in OnePlus 8T and 10 Pro 5G devices lies in the lack of measures to protect the SQL query structure. Exploiting this vulnerability can allow attackers to gain unauthorized access to confidential information...

OpenCode USSD Gateway 安全漏洞

OpenCode USSD Gateway is an OpenCode open source gateway software for processing and managing USSD messages. A security vulnerability exists in OpenCode USSD Gateway version 6.13.11, which stems from an SQL injection in the ID parameter of the getSubUsersByProvider function...