8 matches found
CVE-2020-8520
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
Sql injection
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
Sql injection
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
CVE-2020-8519: Improper Neutralization of Special Elements used in an SQL Command
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
CVE-2020-8520: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql...
PT-2020-6133
Name of the Vulnerable Software and Affected Versions phpzag live add edit delete data tables records with ajax php mysql affected versions not specified Description The issue is related to a lack of protection against SQL query structure exploitation, potentially allowing a remote attacker to...
CVE-2017-1002025: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin add-edit-delete-listing-for-member-module v1.0, The plugin author does not sanitize user supplied input via $act before passing it into an SQL statement...
PT-2017-11014
Name of the Vulnerable Software and Affected Versions add-edit-delete-listing-for-member-module version 1.0 Description The issue arises from the plugin author's failure to sanitize user-supplied input via the $act variable before passing it into an SQL statement, potentially leading to SQL...