5965 matches found
Sql injection
A vulnerability was found in Itech Auction Script 6.49. It has been classified as critical. This affects an unknown part of the file /mcategory.php. The manipulation of the argument mcid with the input 4' AND 1734=1734 AND 'Ggks'='Ggks leads to sql injection Blind. It is possible to initiate the...
PT-2022-8005
Name of the Vulnerable Software and Affected Versions Itech Auction Script version 6.49 Description A critical issue has been identified, affecting the /mcategory.php file. The mcid argument is vulnerable to manipulation, allowing for SQL injection Blind attacks when input such as 4' AND 1734=173...
CVE-2022-34972
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...
CVE-2022-34972
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
CVE-2021-44915 affects Taocms 3.0.2 and is described across multiple sources as a blind SQL injection in the Edit category function. The root cause is insufficient validation of externally supplied SQL statements, enabling an attacker to inject SQL via that function. Documents do not provide patc...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2021-44915
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
CVE-2022-34972: Improper Neutralization of Special Elements used in an SQL Command
So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the attvalueid , manuvalueid , optvalueid , and subcatevalueid parameters at /index.php?route=extension/module/sofiltershopby/filterdata...
PT-2022-22468
Name of the Vulnerable Software and Affected Versions So Filter Shop versions 3.x Description The issue is related to multiple blind SQL injection vulnerabilities. These vulnerabilities can be exploited via the att value id, manu value id, opt value id, and subcate value id parameters at the...
CVE-2021-44915: Improper Neutralization of Special Elements used in an SQL Command
Taocms 3.0.2 was discovered to contain a blind SQL injection vulnerability via the function Edit category...
OpenCart 3.x So Filter Shop By SQL Injection
Exploit Title: OpenCart v3.x So Filter Shop By - Blind SQL Injection Date: 28/06/2022 Exploit Author: Saud Alenazi Vendor Homepage: https://www.opencart.com/ Software Link: https://codecanyon.net/item/so-filter-shop-by-responsive-opencart-module/13945633 Version: V3.X Tested on: XAMPP, Linux...
CVE-2017-20103: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8. This affects an unknown part of the file wp-admin/admin.php. The manipulation of the argument orderby/order with the input ASC%2cselectfromselectsleep2a leads to sql injection Blind. It is possible to...
CVE-2022-31296: Improper Neutralization of Special Elements used in an SQL Command
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/posts/viewpost.php...
CVE-2021-41932
A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc...
CVE-2021-41932
CVE-2021-41932 concerns Wolters Kluwer TeamMate+ Audit, affected version 28.0.19.0. A blind SQL injection exists in the search form, enabling any authenticated user to inject malicious SQL. The underlying cause is a lack of proper filtering/escaping of SQL data in the search forms. Reported impac...
CVE-2021-41932: Improper Neutralization of Special Elements used in an SQL Command
A blind SQL injection vulnerability in search form in TeamMate+ Audit version 28.0.19.0 allows any authenticated user to create malicious SQL injections, which can result in complete database compromise, gaining information about other users, unauthorized access to audit data etc...
PT-2022-11509
Name of the Vulnerable Software and Affected Versions TeamMate+ Audit version 28.0.19.0 Description A blind SQL injection vulnerability in the search form allows any authenticated user to create malicious SQL injections. This can result in complete database compromise, gaining information about...