CVE-2025-1156: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login. The manipulation of the argument usuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...

HuCart SQL Injection Vulnerability

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the system/class/helperclass.php file of the 'getip' function there is a SQL injection vulnerability , the vulnerability stems from the program fails to HTTP packet header data security filtering , remote attacker...