CVE-2023-29842

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

Sql injection

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

CVE-2023-29842

ChurchCRM 4.5.4 is vulnerable to a Blind SQL Injection (time-based) on the endpoint /EditEventTypes.php via the EN_tyid POST parameter. The root cause is unsanitized user input used in an SQL query, enabling potential data exposure or manipulation. An exploited PoC has been published publicly (Pa...

CVE-2023-29842

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

PT-2023-22441 · Churchcrm · Churchcrm

Name of the Vulnerable Software and Affected Versions: ChurchCRM version 4.5.4 Description: The issue concerns a Blind SQL Injection vulnerability, specifically time-based, affecting the /EditEventTypes.php endpoint through the EN tyid POST parameter. Recommendations: For ChurchCRM version 4.5.4,...

CVE-2023-29842: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

CVE-2023-29842

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

CVE-2012-5872: Improper Neutralization of Special Elements used in an SQL Command

ARC aka ARC2 through 2011-12-01 allows blind SQL Injection in getTriplePatternSQL in ARC2StoreSelectQueryHandler.php via comments in a SPARQL WHERE clause...

CVE-2023-0765

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

CVE-2023-0765: Improper Neutralization of Special Elements used in an SQL Command

The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability. The attacker must have at least the privileges of an Author, and the vendor's Slider plugin https://wordpress.org/plugins/slider-bws/ must...

PT-2023-16513

Name of the Vulnerable Software and Affected Versions The Gallery by BestWebSoft WordPress plugin versions prior to 4.7.0 Description The issue is related to a Blind SQL Injection vulnerability due to improper escaping of values used in SQL queries. An attacker must have at least the privileges o...

Snitz Forum 1.0 SQL Injection

Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Date: 13/03/2023 Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...

Snitz Forum v1.0 - Blind SQL Injection Vulnerability

Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...

Snitz Forum v1.0 - Blind SQL Injection

Exploit Title: Snitz Forum v1.0 - Blind SQL Injection Date: 13/03/2023 Exploit Author: Emiliano Febbi Vendor Homepage: https://forum.snitz.com/ Software Link: https://sourceforge.net/projects/sf2k/files/ Version: ALL VERSION Tested on: Windows 10 code . . / ///I . / // 0day PoC...

NotrinosERP 0.7 - Authenticated Blind SQL Injection Exploit

Exploit Title: NotrinosERP 0.7 - Authenticated Blind SQL Injection Exploit Author: Arvandy Blog Post: https://github.com/arvandy/CVE/blob/main/CVE-2023-24788/CVE-2023-24788.md Software Link: https://github.com/notrinos/NotrinosERP/releases/tag/0.7 Vendor Homepage: https://notrinos.com/ Version: 0...

CVE-2023-28883

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint...

Sql injection

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint...

CVE-2023-28883

In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint...

CVE-2023-28883

CVE-2023-28883 affects Cerebrate 1.13 and reports a blind SQL injection in the searchAll API endpoint. Impact is high (C/H/I/H) with network access, no user interaction and no privileges required; potential exposure of confidential data, integrity loss, and availability disruption per the CVSS. T...