CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

PT-2022-16389

Name of the Vulnerable Software and Affected Versions phpUploader versions 1.2 and earlier Description A SQL injection issue allows a remote unauthenticated attacker to obtain database information via unspecified vectors. Recommendations For phpUploader versions 1.2 and earlier, at the moment,...

CVE-2022-23986: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

SQL Injection Vulnerability in Supplier Query System of Shanghai Haidian Software Corporation (CNVD-2022-21719)

Vendor inquiry system is based on VMI management ideas, sharing the enterprise's operational business data with suppliers, instantly controlling the sales information and inventory levels as a solution for market demand forecasting and inventory replenishment. A SQL injection vulnerability exists...

SQL Injection Vulnerability in Damon Enterprise Manager (DEM)

Damon Enterprise Manager DEM is a centralized management platform that monitors, manages and maintains DM databases through a web interface. A SQL injection vulnerability exists in Damon Enterprise Manager DEM, which can be exploited by attackers to obtain sensitive database information...

MCMS has SQL injection vulnerability (CNVD-2022-17364)

MCMS is a lightweight open source content management system developed on java.MCMS is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in BossCMS of Wenzhou Huyin Information Technology Co.

BossCMS is a web content management system. BossCMS of Wenzhou Huanxin Information Technology Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

PT-2022-4193

Name of the Vulnerable Software and Affected Versions TeamPass affected versions not specified Description The issue is related to security configuration errors in the password manager. It allows a remote attacker to exploit the weakness and gain access to database information. Recommendations At...

PT-2022-12630

Name of the Vulnerable Software and Affected Versions Projectworlds Online Examination System version 1.0 Description An SQL Injection issue exists via the eid parameter in the "account.php" file. This allows for potential unauthorized access to database information. Recommendations For...

Projectworlds Online Shopping System SQL Injection Vulnerability

Projectworlds Online Shopping System is an online shopping system from the Austrian company Projectsworlds.A SQL injection vulnerability exists in Projectsworlds Online Book Store PHP, which stems from the fact that Projectsworlds Online Book Store PHP v1.0 is vulnerable to SQL injection via the...

IBM DB2 授权问题漏洞

IBM DB2 is a relational database management system from the U.S. IBM Db2 information disclosure vulnerability can be exploited by attackers to obtain sensitive information...

SQL Injection Vulnerability in DEDECMSV6 (CNVD-2021-95285)

The dedecmsv6 system is a PHP7.X-based development with strong scalability and is fully open source. dedecmsv6 has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd.

SCT is an information service provider in China, dedicated to the cause of disaster mitigation and benefit reduction, and provides the government with comprehensive solutions for disaster mitigation and benefit reduction informatization. A SQL injection vulnerability exists in the Flash Flood...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning System of Fujian SiChuang Software Co.

Fujian SiChuang Software Co., Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. It specializes in providing disaster prevention and mitigation emergency command system solutions for the government, disaster prevention and mitigation...

CVE-2020-18263

PHP-CMS v1.0 was discovered to contain a SQL injection vulnerability in the component search.php via the search parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-28702

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information...

Sql injection

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information...

CVE-2020-28702

A SQL injection vulnerability in TopicMapper.xml of PybbsCMS v5.2.1 allows attackers to access sensitive database information...

CVE-2021-25874

AVideo/YouPHPTube AVideo/YouPHPTube 10.0 and prior is affected by a SQL Injection SQL injection in the catName parameter which allows a remote unauthenticated attacker to retrieve databases information such as application passwords hashes...