15333 matches found
CVE-2025-62422: Improper Neutralization of Special Elements used in an SQL Command
DataEase is an open source data visualization and analytics platform. In versions 2.10.13 and earlier, the /de2api/datasetData/tableField interface is vulnerable to SQL injection. An attacker can construct a malicious tableName parameter to execute arbitrary SQL commands. This issue is fixed in...
CVE-2025-56316
A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering...
CVE-2025-56700: Improper Neutralization of Special Elements used in an SQL Command
Boolean SQL injection vulnerability in the web app of Base Digitale Group spa product Centrax Open PSIM version 6.1 allows a low level priviliged user that has access to the platform, to execute arbitrary SQL commands via the datafine parameter...
PT-2025-53307
Уязвимость программного решения для комплексного управления предприятием Idea Platform Service Manager связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный SQL-код...
PT-2025-54600
Уязвимость платформы для обучения Knomary TMS связана с непринятием мер по защите структуры запроса SQL. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные SQL-запросы...
E-Commerce Website product_add_qty.php file SQL injection vulnerability
E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter prodid in file /pages/productaddqty.php. An attacker can exploit this vulnerability to execu...
CVE-2025-40886 Authenticated SQL Injection on Alert functionality in Guardian/CMC before 25.2.0
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...
EUVD-2009-0298
Malware in sbrugna...
EUVD-2013-3512
Malware in sbrugna...
EUVD-2012-6357
Malware in sbrugna...
EUVD-2012-5213
Malware in sbrugna...
EUVD-2010-4939
Malware in sbrugna...
EUVD-2010-5001
Malware in sbrugna...
EUVD-2011-4590
Malware in sbrugna...
EUVD-2009-2093
Malware in sbrugna...
EUVD-2009-1244
Malware in sbrugna...
EUVD-2006-2267
Malware in sbrugna...
EUVD-2006-2294
Malware in sbrugna...