2 matches found
CVE-2025-67261: Improper Neutralization of Special Elements used in an SQL Command
Abacre Retail Point of Sale 14.0.0.396 is vulnerable to content-based blind SQL injection. The vulnerability exists in the Search function of the Orders page...
6.5CVSS6AI score0.00209EPSS
SaveExploits2References1
CVE-2020-15792
A vulnerability has been identified in Desigo Insight All versions. The web service does not properly apply input validation for some query parameters in a reserved area. This could allow an authenticated attacker to retrieve data via a content-based blind SQL injection attack...
4.3CVSS7.6AI score0.00995EPSS
SaveExploits0
20