PT-2022-17633

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in the DIAE dmdsetHandler.ashx handler. This allows an attacker to inject arbitrary SQL queries, retrieve and modif...

PT-2022-17584

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description A blind SQL injection issue exists, allowing an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands. The issue is...

PT-2022-18091

Name of the Vulnerable Software and Affected Versions Delta Electronics DIAEnergie versions prior to 1.8.02.004 Description The issue is a blind SQL injection vulnerability existing in "HandlerExport.ashx/Calendar". This allows an attacker to inject arbitrary SQL queries, retrieve and modify...

CVE-2022-26059: Improper Neutralization of Special Elements used in an SQL Command

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

CVE-2022-22540

SAP NetWeaver AS ABAP Workplace Server - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 787, allows an attacker to execute crafted database queries, that could expose the backend database. Successful attacks could result in disclosure of a table of contents from the system,...

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2021-41765

A SQL injection issue in pages/editfields/9ajax/addkeyword.php of ResourceSpace 9.5 and 9.6 rev 18274 allows remote unauthenticated attackers to execute arbitrary SQL commands via the k parameter. This allows attackers to uncover the full contents of the ResourceSpace database, including user...

CVE-2021-31827

In Progress MOVEit Transfer before 2021.0 13.0, a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used MySQL, Microsoft SQL Server...

PT-2020-17079

Name of the Vulnerable Software and Affected Versions Karenderia Multiple Restaurant System versions 5.4.2 and below Description A SQL injection issue was discovered, allowing an unauthenticated attacker to modify and leak database contents. Recommendations For versions 5.4.2 and below, update to...

Design/Logic Flaw

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

CVE-2020-22278

phpMyAdmin through 5.0.2 allows CSV injection via Export Section. NOTE: the vendor disputes this because "the CSV file is accurately generated based on the database contents...

Sql injection

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

CVE-2020-8887

Telestream Tektronix Medius before 10.7.5 and Sentry before 10.7.5 have a SQL injection vulnerability allowing an unauthenticated attacker to dump database contents via the page parameter in a page=login request to index.php aka the server login page...

SQL Injection Vulnerability in Food Ordering Management System of Guangzhou Guowan Electronic Technology Co.

Ltd. ordering system is made for the local area network network ordering system, which is mainly applicable to small and medium-sized enterprises, institutions, hospitals, schools and other organizations to order food. Guangzhou Guowan Electronic Technology Co., Ltd. ordering management system SQ...

CVE-2018-1280

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

CVE-2018-1280

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

CVE-2018-1280

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

CVE-2018-1280: Improper Neutralization of Special Elements used in an SQL Command

Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 contains a blind SQL injection vulnerability. An unauthenticated user can perform a SQL injection in the command center which results in disclosure of database contents...

PT-2018-11396

Name of the Vulnerable Software and Affected Versions Pivotal Greenplum Command Center versions 2.x prior to 2.5.1 Description The issue allows an unauthenticated user to perform a SQL injection in the command center, resulting in the disclosure of database contents. This is a blind SQL injection...

PT-2018-5621

Name of the Vulnerable Software and Affected Versions: Trend Micro Smart Protection Server Standalone versions 3.2 and below Description: An issue exists where improper access control could allow an attacker to decrypt database contents, potentially accessing a vulnerable system. Recommendations:...