CVE-2013-4717

CVE-2013-4717 documents multiple SQL injection vulnerabilities in Open Ticket Request System (OTRS) Help Desk. Affected releases: OTRS 3.0.x before 3.0.22, 3.1.x before 3.1.18, and 3.2.x before 3.2.9. Vulnerability arises from improper handling in modules Kernel/Output/HTML/PreferencesCustomQueue...

CVE-2013-4717

Removed by vendor...

CVE-2021-37557

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated but low-privileged attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter...

CVE-2021-37557

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated but low-privileged attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter...

CVE-2021-37556

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated but low-privileged attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csvHostGroupLogs.php start and end parameters...

CVE-2021-37557: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated but low-privileged attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter...

CVE-2021-37556: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated but low-privileged attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csvHostGroupLogs.php start and end parameters...

Fortinet FortiPortal SQL injection vulnerability

Fortinet FortiPortal is an advanced, feature-rich hosted security analysis and management support tool for Fortinet's FortiGate, FortiWiFi, and FortiAP product lines that can be used as a virtual machine for MSPs. vulnerability, which stems from the product's failure to adequately clean...

PT-2021-7464

Name of the Vulnerable Software and Affected Versions FortiSandbox versions 3.1.0 through 3.1.4 FortiSandbox versions 3.2.0 through 3.2.2 Description The issue is related to a lack of protection against SQL query structure attacks in the MTA adapter module for email message checking and the...

WordPress WooCommerce Plugin SQL Injection

An SQL injection vulnerability exists in WordPress WooCommerce Plugin. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

Exploit for SQL Injection in Virtuasoftware Cobranca

My CVEs Collection of PoC to my C...

CVE-2021-37478

In NavigateCMS version 2.9.4 and below, function "block" is vulnerable to sql injection on parameter "block-order", which results in arbitrary sql query execution in the backend database...

CVE-2021-37477

In NavigateCMS version 2.9.4 and below, function in "structure.php" is vulnerable to sql injection on parameter "childrenorder", which results in arbitrary sql query execution in the backend database...

CVE-2021-37475

In NavigateCMS version 2.9.4 and below, function in "templates.php" is vulnerable to sql injection on parameter "template-properties-order", which results in arbitrary sql query execution in the backend database...

CVE-2021-37473

In NavigateCMS version 2.9.4 and below, function in "product.php" is vulnerable to sql injection on parameter "products-order" through a post request, which results in arbitrary sql query execution in the backend database...

CVE-2021-32789 Arbitrary SQL (SQL injection) possible via the Store API component.

woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to version 2.5.16. Via a carefully crafted URL, an exploit can be...

PT-2021-21691

Name of the Vulnerable Software and Affected Versions NavigateCMS versions 2.9.4 and below Description The issue concerns a sql injection vulnerability in the block function, specifically affecting the block-order parameter. This vulnerability allows for the execution of arbitrary sql queries in...

PT-2021-21688

Name of the Vulnerable Software and Affected Versions NavigateCMS versions 2.9.4 and below Description The issue concerns a function in the product.php file that is vulnerable to sql injection. This vulnerability occurs on the products-order parameter through a post request, allowing for arbitrar...

CVE-2021-37476: Improper Neutralization of Special Elements used in an SQL Command

In NavigateCMS version 2.9.4 and below, function in product.php is vulnerable to sql injection on parameter id through a post request, which results in arbitrary sql query execution in the backend database...

CVE-2021-37473: Improper Neutralization of Special Elements used in an SQL Command

In NavigateCMS version 2.9.4 and below, function in product.php is vulnerable to sql injection on parameter products-order through a post request, which results in arbitrary sql query execution in the backend database...