13183 matches found
PHP Fusion SQL injection
An SQL injection vulnerability exists in the PHP Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Joomla Ek Rishta SQL Injection (CVE-2018-7315)
An SQL injection vulnerability exists in Joomla Ek Rishta component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...
SQL Injection
dolibarr/dolibarr is vulnerable to SQL injection. The vulnerability exists as the id parameter type was not enforced to the int type, and could be used to inject and execute arbitrary SQL statements...
CVE-2020-14443
A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
Sql injection
A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2020-14443
A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
Sql injection
A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...
PHP-Fusion has multiple vulnerabilities Vulnerabilities
PHP-Fusion is a lightweight open source content management system . It uses mySQL database to store site content and provide a simple , comprehensive back-end management system . PHP-Fusion includes most of the CMS system has the functionality . PHP-Fusion has PHP object injection and SQL injecti...
The vulnerability of the SQLite database management system lies in the lack of protection for SQL query structures, which allows attackers to trigger a service failure.
The vulnerability of the SQLite database management system is related to the lack of protection for SQL query structures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination by executing arbitrary SQL commands...
Symphony CMS SQL Injection (CVE-2013-2559)
An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
SQL Injection
@nozbe/watermelondb is vulnerable to SQL Injection. A remote attacker is able to inject and execute arbitrary SQL statements via the id parameter...
CVE-2020-5579
SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...
vBulletin nodeId SQL Injection (CVE-2020-12720)
An SQL injection vulnerability exists in vBulletin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress Chop Slider SQL Injection Vulnerability
WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Chop Slider is a jQuery slider plugin used in it. A SQL injection vulnerability exists in the 'id' GET parameter of the...
CVE-2020-11530
A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to getscript/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user...
Wordpress LearnPress SQL Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.LearnPress is a learning management system plugin used in it. A SQL injection vulnerability exists in Wordpress LearnPress...
WordPress LearnPress Plugin SQL Injection
An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
WordPress LearnDash Plugin SQL Injection (CVE-2020-6009)
An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PMB 5.6 SQL Injection
Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...
CVE-2020-11537
A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API...