Apache Fineract SQL Injection

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

SOGo Contact Search Code Execution

The vulnerability of the contact search component in the SOGo collaborative work software is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...

Glances export module Code Execution

The vulnerability of the export module of the Glances monitoring tool relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

centreon-web Code Execution

The vulnerability of the centreon-web component of the Centreon software for monitoring IT infrastructure is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created SQL que...

Devolutions Server SQL Injection

The vulnerability of the Devolutions Server platform for centralized and secure management of passwords, user accounts, and confidential information is related to the lack of measures taken to protect the SQL query structure when processing the DateSortField parameter. Exploiting this vulnerabili...

MapServer SQL Injection Code Execution

The vulnerability of the server-based geospatial information system, MapServer, is related to the lack of measures taken to protect the SQL query structure during the processing of the PropertyName parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotel...

PT-2024-7376 · Unknown · Edonline Ems

Name of the Vulnerable Software and Affected Versions: EdOnline EMS affected versions not specified Description: The issue is related to the lack of protection for the SQL query structure in EdOnline EMS, which could allow a remote attacker to disclose protected information. Recommendations: At t...