EUVD-2022-46033

Malicious code in bioql PyPI...

Sql injection

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients...

CVE-2022-40405

CVE-2022-40405 affects WoWonder Social Network Platform v4.1.2 and is due to a SQL injection vulnerability in the offset parameter of requests.php?f=load-my-blogs. The CVSS 3.1 base score is 7.5 (High), with network attack vector, no privileges required, no user interaction, and a confidentiality...

PT-2022-26694

Name of the Vulnerable Software and Affected Versions WoWonder Social Network Platform version 4.1.4 Description The issue is related to a SQL injection vulnerability. It can be exploited via the offset parameter at the "requests.php?f=search&s=recipients" endpoint. Recommendations For WoWonder...

CVE-2022-42984: Improper Neutralization of Special Elements used in an SQL Command

WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients...

CVE-2022-40405: Improper Neutralization of Special Elements used in an SQL Command

WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs...

PT-2022-25369

Name of the Vulnerable Software and Affected Versions WoWonder Social Network Platform version 4.1.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the offset parameter at the "requests.php?f=load-my-blogs" endpoint. Recommendations For WoWonder Social...

WoWonder Social Network Platform 3.1 - Authentication Bypass

Exploit Title: WoWonder Social Network Platform 3.1 - Authentication Bypass Date: 11.06.2021 Exploit Author: securityforeveryone.com Researchers : Security For Everyone Team - https://securityforeveryone.com Vendor Homepage: https://www.wowonder.com/ Software Link:...