2003 matches found
PT-2024-2637
Name of the Vulnerable Software and Affected Versions pgAdmin versions 8.4 and earlier Description pgAdmin is susceptible to a Remote Code Execution RCE vulnerability stemming from improper restriction of the path name to an accessible directory. Successful exploitation allows a remote attacker t...
ProfileGrid < 5.7.9 - Unauthenticated SQL Injection
Description The ProfileGrid plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 5.7.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to...
Employee Management System 1.0 - (txtfullname) and (txtphone) SQL Injection Vulnerability
Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on: Debian CVE :...
Task Management System SQL注ε ₯ζΌζ΄
SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in PHP Task Management System version 1.0, which stems from an incorrect manipulation of the parameter userid that can lead to sql injection...
CVE-2024-3164
In dotCMS dashboard, the Tools and Log Files tabs under System β Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System...
PT-2024-24172 Β· Dotcms Β· Dotcms
Name of the Vulnerable Software and Affected Versions: dotCMS version 22.02 Description: The issue concerns the dotCMS dashboard, specifically the Tools and Log Files tabs under System β Maintenance Portlet. This portlet, which is intended for Admin access, is accessible to anyone with the portle...
Pods < 3.1 - Contributor+ SQLi
Description The plugin is vulnerable to SQL Injection via shortcode due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with contributor level access or higher, to append...
Sentrifugo id Parameter SQL Injection Vulnerability
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which stems from a missing id parameter in the...
Sentrifugo business_id Parameter SQL Injection Vulnerability
Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which originates from the lack of validation of...
CVE-2024-1711 Create by Mediavine <= 1.9.4 - Unauthenticated SQL Injection via 'id'
The Create by Mediavine plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.9.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...
CVE-2024-1799
The GamiPress β The 1 gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to SQL Injection via the 'achievementtypes' attribute of the gamipressearnings shortcode in all versions up to, and including, 6.8.6 due to insufficient escapin...
Important: Red Hat Security Advisory: postgresql security update
An update for the postgresql:10 module is now available for Red Hat Enterprise Linux 8.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...
CVE-2024-25656
CVE-2024-25656 affects AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS. The root cause is improper input validation that allows unauthenticated CPE devices to store arbitrarily large amounts of data during enrollment, which can lead to a denial of service by overloading the applicati...
CVE-2024-1713
Summary of CVE-2024-1713 (Plv8 Deferred Trigger Privilege Escalation) Affects plv8 version 3.2.1. If a user can create objects in a database, they can cause deferred triggers to execute as the Superuser during autovacuum. This is a privilege-escalation scenario with impact on confidentiality, int...
Fortinet FortiClientEMS SQL Injection Vulnerability
Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. A SQL injection vulnerability exists...
Customer Support System SQL Injection Vulnerability (CNVD-2024-14033)
Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from ...
CVE-2024-28094 Blind SQL Injection in Chat functionality in Schoolbox
Chat functionality in Schoolbox application before version 23.1.3 is vulnerable to blind SQL Injection enabling the authenticated attackers to read, modify, and delete database records...
CVE-2024-27916
Minder prior to version 0.0.33 is affected by an access-control flaw where authenticated users can leverage GetRepositoryByName, DeleteRepositoryByName, and GetArtifactByName to access any repository in the database. The underlying issue is that the DB query checks repo owner, repo name, and prov...
BIT-GRAFANA-2020-12458
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information e.g., cleartext or encrypted datasource passwords...