CVE-2026-4287

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

PT-2026-25831

A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0. The affected element is an unknown function of the file /rest/devStatus/queryResources of the component Endpoint. Performing a manipulation of the argument areaId results in sql injection. The attack can be...

CVE-2024-8344

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

CVE-2021-24399

The checkorder function of The Sorter WordPress plugin through 1.0 uses an areaid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-24399

The checkorder function of The Sorter WordPress plugin through 1.0 uses an areaid parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

PT-2021-15932

Name of the Vulnerable Software and Affected Versions The Sorter WordPress plugin versions 1.0 and earlier Description The issue concerns the check order function, which uses an area id parameter that is not sanitized, escaped, or validated before being inserted into a SQL statement, leading to S...

PT-2012-6181

Name of the Vulnerable Software and Affected Versions SAMEDIA LandShop version 0.9.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the OB ID parameter in a single action to "admin/action/objects.php", the AREA ID parameter in a single...