13419 matches found
Centreon SQL Injection Vulnerability (CNVD-2019-42245)
Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web versions prior to 2.8.28. The vulnerability ste...
Sql injection
Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...
Sql injection
Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter...
CVE-2008-0785
Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...
CVE-2007-5976
SQL injection vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter...
LabCollector 5.423 - SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: LabCollector Laboratory Information System 5.423 - Multiples SQL Injection Software Links/Project: https://www.labcollector.com/clientarea/downloads.php Version: LabCollector Laboratory Information System 5.423 Exploit Author:...
eBrigade SQL Injection Vulnerability (CNVD-2019-35774)
eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...
CVE-2019-15301
A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...
CVE-2019-15301: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...
CVE-2019-5991
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2019-5996
SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2019-17921
Name of the Vulnerable Software and Affected Versions Cybozu Garoon versions 4.0.0 through 4.10.3 Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For versions 4.0.0 through 4.10.3, update to a version that contains a fix for this issu...
CVE-2019-5991: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2019-5996: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Video Insight VMS 7.3.2.5 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2019-17926
Name of the Vulnerable Software and Affected Versions Video Insight VMS versions 7.3.2.5 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For versions 7.3.2.5 and earlier, update to a version later than 7.3.2.5 to resolve t...
CVE-2019-13191
A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page...
CVE-2019-13191: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in IntraMaps MapControl 8 allows attackers to execute arbitrary SQL commands via the /ApplicationEngine/Search/Refine/Set page...
PT-2019-13180
Name of the Vulnerable Software and Affected Versions IntraMaps MapControl version 8 Description A SQL injection issue allows attackers to execute arbitrary SQL commands via the "ApplicationEngine/Search/Refine/Set" page. Recommendations For IntraMaps MapControl version 8, consider restricting...
CVE-2019-11363
A SQL injection vulnerability in Snare Central before 7.4.5 allows remote authenticated attackers to execute arbitrary SQL commands via the AgentConsole/UserGroupQuery.php ShowUser parameter...