CVE-2024-54447

Saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique the attacker can disclose all database contents. Account takeover is a potential outcome depending on the presence or lack thereof entries in certain...

PT-2025-11293

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A blind SQL injection exists in the logout functionality, allowing unauthenticated attackers to exploit it. Using a time-based blind SQLi technique, an attacker can disclose all database...

PT-2025-11297

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The saved search functionality contains a blind SQL injection that can be exploited by authenticated attackers. Using a time-based blind SQLi technique, the attacker can disclose all databas...

CVE-2018-1280

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

PT-2018-11396

Name of the Vulnerable Software and Affected Versions Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 Description The issue allows an unauthenticated user to perform a SQL injection in the command center, resulting in the disclosure of database contents. This is a blind SQL injection...

CVE-2018-1280: Improper Neutralization of Special Elements used in an SQL Command

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...