CVE-2023-2064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Minova Technology eTrace allows SQL Injection. This issue affects eTrace: before 23.05.20...

PT-2023-18245 · Unknown · Thememanager

Name of the Vulnerable Software and Affected Versions: ThemeManager versions prior to SMR May-2023 Release 1 Description: The issue is related to improper access control in ThemeManager, allowing local attackers to write arbitrary files with system privilege. Recommendations: For versions prior t...