4 matches found
SUSE CVE-2012-3441
The database creation script module/idoutils/db/scripts/createmysqldb.sh in Icinga 1.7.1 grants access to all databases to the icinga user, which allows icinga users to access other databases via unspecified vectors...
PT-2021-11899
Name of the Vulnerable Software and Affected Versions: Online Book Store version 1.0 Description: The issue concerns a union-based blind SQL injection vulnerability. Specifically, the id parameter in the "detail.php" file is vulnerable, allowing attackers to retrieve all databases. Recommendation...
PT-2021-11264
Name of the Vulnerable Software and Affected Versions: REDCap version 10.3.4 Description: The issue concerns a SQL injection vulnerability in the ToDoList function via the sort parameter. This vulnerability arises because the application incorporates user-submitted information into database queri...