EUVD-2021-28623

Malicious code in bioql PyPI...

ClassApps SelectSurvey.NET SQL Injection Vulnerability

Net is a survey software from ClassApps, Inc. built using Microsoft's cutting-edge . A SQL injection vulnerability exists in the ID parameter of the UploadedImageDisplay.aspx endpoint, which can be exploited by an unauthenticated attacker to retrieve data from the application's back-end database...

CVE-2021-41608

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...

Sql injection

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection...

PT-2022-11441

Name of the Vulnerable Software and Affected Versions SelectSurvey.NET versions prior to 5.052.000 Description The issue allows a remote, unauthenticated attacker to retrieve data from the application's backend database. This is achieved through SQL injection in the ID parameter of the...

PT-2022-11440

Name of the Vulnerable Software and Affected Versions SelectSurvey.NET versions prior to 5.052.000 Description A file disclosure issue allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the ID parameter in sequential order beginning from 1 in the...

CVE-2021-41608: Authorization Bypass Through User-Controlled Key

A file disclosure vulnerability in the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve survey user submitted data by modifying the value of the ID parameter in sequential order beginning from 1...

CVE-2021-41609: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the ID parameter of the UploadedImageDisplay.aspx endpoint of SelectSurvey.NET before 5.052.000 allows a remote, unauthenticated attacker to retrieve data from the application's backend database via boolean-based blind and UNION injection...