Advanced Page Visit Counter < 6.1.6 - Subscriber+ Blind SQL injection

The plugin does not escape the artID parameter before using it in a SQL statement in the apvcresetcountart AJAX action, available to any authenticated user, leading to a SQL injection v = 5.0.8 - https://example.com/wp-admin/admin-ajax.php?action=apvcresetcountart&artID=sleep10 v 6.1.6 -...

PT-2022-18091

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in "HandlerExport.ashx/Calendar". This allows an attacker to inject arbitrary SQL queries, retrieve and modify...

CVE-2021-43701: Improper Neutralization of Special Elements used in an SQL Command

CSZ CMS 1.2.9 has a Time and Boolean-based Blind SQL Injection vulnerability in the endpoint /admin/export/getcsv/articledb, via the fieldS and orderby parameters...

PT-2022-17647

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the GetLatestDemandNode and GetDemandAnalysisData functions, allowing an attacker to inject arbitrary SQL queries, retrieve and modify...

PT-2022-17633

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the DIAE dmdsetHandler.ashx handler. This allows an attacker to inject arbitrary SQL queries, retrieve and modif...

PT-2022-18123

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability that exists in the DIAE loopmapHandler.ashx and DIAE HandlerTag KID.ashx handlers. This allows an attacker to inject arbitra...

PT-2022-17584

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. The issue is...

CVE-2022-26836: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26887: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEloopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26065: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-17996

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in HandlerECC.ashx also referred to as HandlerDialogECC.ashx, allowing an attacker to inject arbitrary SQL queries. This enables the...

PT-2022-17622

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands due to a blind SQL injection vulnerability...

PT-2022-17646

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the GetQueryData function. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database...

PT-2022-17796

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists in the HandlerPageP KID.ashx and DIAE hierarchyHandler.ashx handlers. This allows an attacker to inject arbitrary SQL queries, retrieve an...

PT-2022-17997

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability that exists in the GetDemandAnalysisData function. This allows an attacker to inject arbitrary SQL queries, retrieve and...

CVE-2022-26666: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

PT-2022-17803

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the DIAE eccoefficientHandler.ashx handler. This allows an attacker to inject arbitrary SQL queries, which can...

CVE-2022-26349: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in DIAEeccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26514: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in DIAEtagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-26667: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...