PT-2023-29136 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process registration.php affected versions not specified Description: The issue is related to the 'age' parameter of the process registration.php resource, which does not validate the characters received, and they are sent unfiltered to the...

PT-2023-29134 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process login.php affected versions not specified Description: The issue is related to the 'Email' parameter of the process login.php resource, which does not validate the characters received, sending them unfiltered to the database...

PT-2023-29135 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: process login.php affected versions not specified Description: The issue concerns the Password parameter of the process login.php resource, which does not validate the characters received. As a result, these characters are sent unfiltered to...

PT-2023-5206 · Fortinet · Fortitester

Name of the Vulnerable Software and Affected Versions: FortiTester versions 2.3.0 through 7.2.3 Description: A use of hard-coded credentials issue in FortiTester may allow an attacker who has gained shell access to the device to access the database via shell commands. This could potentially lead ...

PT-2023-16626

Name of the Vulnerable Software and Affected Versions Online Services Software versions prior to 1.17 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendation...

WordPress plugin SQL injection vulnerability (CNVD-2021-28751)

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wpDataTables is used in one of the chart management plugin . WordPress plugin WpDataTables-Tables & Table Charts...

SQL injection vulnerability in the ne***.asp page of website building system of Yixing Ding.com Network Service Co.

Yixing Ding.com Network Service Co., Ltd. is a network technology company engaged in enterprise Internet access, web hosting, system cabling and other services. There is a SQL injection vulnerability in the ne.asp page of the website building system of Yixing Ding.com Network Service Co. Ltd. whi...

CVE-2020-6275

SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in an attacker can use inappropriate path names containing malicious server names in the import/export of sessions functionality and coerce...

Metinfo SQL Injection Vulnerability (CNVD-2019-42845)

MetInfo is a content management system CMS developed by China Mito MetInfo using PHP and Mysql. A SQL injection vulnerability exists in MetInfo. The vulnerability stems from a lack of validation of externally entered SQL statements in the database-based application. An attacker can exploit this...

WordPress wp-business-intelligence-lite plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-business-intelligence-lite is a plugin used to create responsive charts. A SQL injection vulnerability exists in the WordPress...

SQL Injection Vulnerability in the Website Building System of Qihang Internet Information Technology Co.

Ltd. is a Tianjin website construction company as well as a Tianjin network company. There is a SQL injection vulnerability in the website building system of Tianjin Enterprise Zhicheng Technology Co. An attacker can use the vulnerability to obtain sensitive information from the database...

QYKCMS update.php page has an arbitrary file deletion vulnerability

QYKCMS is a lightweight intelligent website building system based on PHP+MySql developed by QYK. QYKCMS update.php page exists arbitrary file deletion vulnerability. Allow attackers to exploit the vulnerability to delete arbitrary files, such as deleting install.lck for CMS reloading, hijacking t...

UBUNTU-CVE-2017-17919

DISPUTED SQL injection vulnerability in the 'order' method in Ruby on Rails 5.1.4 and earlier allows remote attackers to execute arbitrary SQL commands via the 'id desc' parameter. NOTE: The vendor disputes this issue because the documentation states that this method is not intended for use with...

TYPO3 Content Rating Extbase Extension SQL Injection Vulnerability

TYPO3 is a content management system based on PHP4/PHP5+MYsql. TYPO3 Content Rating Extbase Extension suffers from a SQL injection vulnerability due to the program's failure to adequately filter user-supplied data before it is used in SQL queries. An attacker can exploit the vulnerability to...

Blog Calendar SQL Injection Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Blog Calendar component of Joomla! Because the program fails to adequately filter user-submitted input, an attacker can exploit the vulnerability to take control of the application, access or modi...

Sophos XG Firewall '/userportal/Controller' Terminal SQL Injection Vulnerability

Sophos XG Firewall delivers the performance, control and security of the ultimate enterprise firewall. Featuring unified user, application & network control, instant visibility and powerful management & scalability. Sophos XG Firewall suffers from a SQL injection vulnerability that stems from...

Sungard eTRAKiT3 SQL Injection Vulnerability

SunGard's Financial Services division provides mission-critical software and technology services to organizations at all stages of their financial journey. Sungard eTRAKiT3 version 3.2.1.17 suffers from a SQL injection vulnerability due to the valueasstring parameter failing to adequately filter...

Lepton Add_droplets Parameter SQL Injection Vulnerability

Lepton is a set of tools for lossless compression of JPEG format files. A SQL injection vulnerability exists in the Lepton Adddroplets parameter, which could be exploited by an attacker to compromise an application, access or modify data, or exploit a potential vulnerability in the underlying...

phpMyAdmin SQL Injection Vulnerability (CNVD-2016-10819)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. The tool is capable of creating and deleting databases, creating, deleting, and modifying database tables, executing SQL script commands, and more. A SQL injection vulnerability exists in phpMyAdmin...

DUware DUpaypal 3.03.1 - detail.asp?iPro SQL Injection

DUware DUpaypal 3.03.1 - detail.asp?iPro SQL Injection source: https://www.securityfocus.com/bid/14034/info DUpaypal Pro is prone to multiple SQL-injection vulnerabilities because the fails application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...