Lucene search
+L

5428 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•5 views

CVE-2024-51620: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in porsline Porsline porsline allows Blind SQL Injection.This issue affects Porsline: from n/a through = 1.0.2...

8.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•4 views

CVE-2024-50524: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Blind SQL Injection.This issue affects Administrator Z: from n/a through 2024.10.21...

8.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•4 views

CVE-2024-51625: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through = 1.5...

8.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/09 12:00 a.m.•3 views

CVE-2024-51619: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in market360 Market 360 Viewer market-360-viewer allows Blind SQL Injection.This issue affects Market 360 Viewer: from n/a through = 1.01...

8.5CVSS5.8AI score0.00395EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/07 7:19 a.m.•36 views

BIT-SUITECRM-2024-50332 Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS9AI score0.00448EPSS
SaveExploits0References2
Mend
Mend
•added 2024/11/05 6:40 p.m.•2 views

CVE-2024-50332

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS0.00448EPSS
SaveExploits0References3
CVE
CVE
•added 2024/11/05 6:40 p.m.•87 views

CVE-2024-50332

CVE-2024-50332 affects SuiteCRM, where insufficient input validation enables Blind SQL injection in DeleteRelationShip. Impact is limited to the affected component/function within SuiteCRM; specific root cause cited as input validation failure. Remediation is available: upgrade to versions 7.14.6...

8.8CVSS9.1AI score0.00448EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/11/05 6:40 p.m.•53 views

CVE-2024-50332 Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS0.00448EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/05 6:40 p.m.•30 views

CVE-2024-50332 Authenticated Blind SQL Injection in DeleteRelationShip in SuiteCRM

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS7.7AI score
SaveExploits0References3
CVE
CVE
•added 2024/11/05 6:35 p.m.•74 views

CVE-2024-49773

SuiteCRM vulnerability CVE-2024-49773 involves poor input validation in the export functionality, where the authenticated user can abuse the current_post parameter to perform blind SQL injection via generateSearchWhere(), leading to potential information disclosure of personally identifiable info...

6.5CVSS5.7AI score0.00303EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•3 views

CVE-2024-50332: Improper Neutralization of Special Elements used in an SQL Command

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Insufficient input value validation causes Blind SQL injection in DeleteRelationShip. This issue has been addressed in versions 7.14.6 and 8.7.1. Users are advised to upgrade. There are no know...

8.8CVSS5.6AI score0.00448EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/04 3:15 p.m.•17 views

CVE-2024-51626

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through 1.1...

8.8CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/04 12:00 a.m.•2 views

CVE-2024-51626: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...

8.8CVSS5.8AI score0.00441EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/29 5:15 p.m.•16 views

CVE-2024-8924

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

7.5CVSS5.8AI score0.00498EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/29 5:15 p.m.•27 views

CVE-2024-8924

ServiceNow has addressed a blind SQL injection vulnerability that was identified in the Now Platform. This vulnerability could enable an unauthenticated user to extract unauthorized information. ServiceNow deployed an update to hosted instances, and ServiceNow provided the update to our partners...

8.7CVSS0.00498EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/28 1:15 p.m.•14 views

CVE-2024-50479

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mansur Ahamed Woocommerce Quote Calculator allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through 1.1...

9.8CVSS5.8AI score0.00485EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•4 views

CVE-2024-50479: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in chenyenming Woocommerce Quote Calculator woo-quote-calculator-order allows Blind SQL Injection.This issue affects Woocommerce Quote Calculator: from n/a through = 1.1...

9.8CVSS5.8AI score0.00485EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/20 10:15 a.m.•28 views

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in anciwasim Back Link Tracker back-link-tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through = 1.0.0...

8.8CVSS0.00233EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/20 10:15 a.m.•32 views

CVE-2024-49617

Cross-Site Request Forgery CSRF vulnerability in Bhaskar Dhote Back Link Tracker allows Blind SQL Injection.This issue affects Back Link Tracker: from n/a through 1.0.0...

8.8CVSS5.8AI score0.00233EPSS
SaveExploits0References1
OSV
OSV
•added 2024/10/20 10:15 a.m.•19 views

CVE-2024-49618

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Jordan Lyall MyTweetLinks allows Blind SQL Injection.This issue affects MyTweetLinks: from n/a through 1.1.1...

8.8CVSS5.8AI score0.00441EPSS
SaveExploits0References1
Rows per page
Query Builder