5469 matches found
CVE-2021-43789: Improper Neutralization of Special Elements used in an SQL Command
PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with orderBy and sortOrder parameters. The problem is fixed in version 1.7.8.2...
CVE-2021-25784
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article...
Sql injection
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search...
Sql injection
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article...
CVE-2021-25784
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article...
CVE-2021-25783
Taocms v2.5Beta5 has a blind SQL injection vulnerability in the Article Search function. The issue is documented across multiple sources as a SQL injection flaw in TaoCMS, with no public exploitation details provided in these connected entries. Per the CVE record, the vulnerability carries a CVSS...
CVE-2021-25783: Improper Neutralization of Special Elements used in an SQL Command
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search...
PT-2021-16794
Name of the Vulnerable Software and Affected Versions Taocms version 2.5Beta5 Description The issue is related to a blind SQL injection vulnerability. This vulnerability can be exploited via the Edit Article function. Recommendations For Taocms version 2.5Beta5, consider restricting access to the...
PT-2021-16793
Name of the Vulnerable Software and Affected Versions Taocms version 2.5Beta5 Description The issue is related to a blind SQL injection vulnerability. It occurs via the Article Search function. Recommendations For Taocms version 2.5Beta5, consider restricting access to the Article Search function...
CVE-2021-25784: Improper Neutralization of Special Elements used in an SQL Command
Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article...
CVE-2022-38148 - Blind SQL Injection via GridFieldSortableHeader
More info at https://www.silverstripe.org/download/security-releases/cve-2022-38148...
CVE-2021-3958
Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0...
CVE-2021-3958
CVE-2021-3958 is a SQL injection vulnerability in IPack SCADA Automation Software caused by improper handling of parameters. It affects IPack SCADA Software versions prior to 1.1.0 and is described as Blind SQL Injection with potential for remote exploitation over network. Public records indicate...
CVE-2021-3958: Improper Neutralization of Special Elements used in an SQL Command
Improper Handling of Parameters vulnerability in Ipack Automation Systems Ipack SCADA Software allows : Blind SQL Injection.This issue affects Ipack SCADA Software: from unspecified before 1.1.0...
Fuel CMS 1.4.13 SQL Injection
Exploit Title: Fuel CMS 1.4.13 - 'col' Parameter Blind SQL Injection Authenticated Date: 2021-04-11 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/archive/1.4.13.zip Version: 1.4.13 Tested on: Kali Linux, PHP...
Fuel CMS 1.4.13 - (col) Blind SQL Injection Vulnerability
Exploit Title: Fuel CMS 1.4.13 - 'col' Blind SQL Injection Authenticated Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/archive/1.4.13.zip Version: 1.4.13 Tested on: Kali Linux, PHP 7.4.16, Apache 2.4.46 Steps...
Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection
The plugin does not sanitise and escape the time parameter before using it in a SQL statement in the mecloadsinglepage AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue PoC...
Fuel CMS 1.4.13 - 'col' Blind SQL Injection (Authenticated)
Exploit Title: Fuel CMS 1.4.13 - 'col' Blind SQL Injection Authenticated Date: 2021-04-11 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.getfuelcms.com/ Software Link: https://github.com/daylightstudio/FUEL-CMS/archive/1.4.13.zip Version: 1.4.13 Tested on: Kali Linux, PHP 7.4.16,...