4663 matches found
CVE-2024-8950
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...
CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...
CVE-2024-55986
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in tiny13 Service service allows Blind SQL Injection.This issue affects Service: from n/a through = 1.0.4...
CVE-2024-55982 WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in richteam Share Buttons – Social Media allows Blind SQL Injection.This issue affects Share Buttons – Social Media: from n/a through 1.0.2...
CVE-2024-53815
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DOTonPAPER Pinpoint Booking System booking-system allows Blind SQL Injection.This issue affects Pinpoint Booking System: from n/a through = 2.9.9.5.1...
CVE-2024-53807
WP Mailster (Brandtoss) CVE-2024-53807 is a SQL Injection vulnerability affecting WP Mailster versions up to 1.8.16.0. Public docs indicate an authenticated (Contributor+) SQL injection via the orderby parameter, described as Blind SQL Injection with high impact. Patch status in the CVE details i...
CVE-2024-53807 WordPress WP Mailster plugin <= 1.8.16.0 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in brandtoss WP Mailster wp-mailster allows Blind SQL Injection.This issue affects WP Mailster: from n/a through = 1.8.16.0...
CVE-2024-53817
CVE-2024-53817 affects the WordPress plugin Product Labels For Woocommerce (Acowebs) and is caused by improper neutralization of special elements in SQL commands, enabling a blind SQL injection. Affected versions are 1.5.8 and earlier. The vulnerability is described as allowing Blind SQL Injectio...
CVE-2024-53793
Cross-Site Request Forgery CSRF vulnerability in jerodmoore eDoc Easy Tables edoc-easy-tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through = 1.29...
CVE-2024-53793 WordPress eDoc Easy Tables plugin <= 1.29 - CSRF to SQL Injection vulnerability
Cross-Site Request Forgery CSRF vulnerability in eDoc Intelligence LLC eDoc Easy Tables allows Blind SQL Injection.This issue affects eDoc Easy Tables: from n/a through 1.29...
CVE-2024-53793
CVE-2024-53793 describes a CSRF to SQL Injection vulnerability in the WordPress plugin eDoc Easy Tables (versions
PT-2024-35907 · Unknown · Edoc Easy Tables
Name of the Vulnerable Software and Affected Versions: eDoc Easy Tables versions prior to 1.29 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability that allows Blind SQL Injection. This means an attacker can trick a user into performing unintended actions on a web...
CVE-2024-52474
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Сервис “Экспресс Платежи” Express Payments Module express-pay allows Blind SQL Injection.This issue affects Express Payments Module: from n/a through = 1.1.8...
CVE-2024-7026
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Teknogis Informatics Closed Circuit Vehicle Tracking Software allows SQL Injection, Blind SQL Injection. This issue affects Closed Circuit Vehicle Tracking Software: through 21.11.2024. NOTE: The...
CVE-2024-52436
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Post SMTP allows Blind SQL Injection.This issue affects Post SMTP: from n/a through 2.9.9...
CVE-2024-52436
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saad Iqbal Post SMTP post-smtp allows Blind SQL Injection.This issue affects Post SMTP: from n/a through = 2.9.9...
PT-2024-35276 · Post Smtp · Post Smtp
Name of the Vulnerable Software and Affected Versions: Post SMTP versions n/a through 2.9.9 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection' vulnerability, which allows Blind SQL Injection. Recommendations: F...
CVE-2024-51882
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ehues Gboy Custom Google Map allows Blind SQL Injection.This issue affects Gboy Custom Google Map: from n/a through 1.2...
CVE-2024-51843
CVE-2024-51843 is an authenticated SQL Injection in Olland.Biz Horsemanager (WordPress plugin), affecting Horsemanager versions up to 1.3. The root cause is improper neutralization of inputs in SQL commands. Exploitation requires authenticated access (Contributor+). Red Hat and Wordfence entries ...
CVE-2024-51619
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in market360 Market 360 Viewer market-360-viewer allows Blind SQL Injection.This issue affects Market 360 Viewer: from n/a through = 1.01...