CVE-2025-7442

CVE-2025-7442 affects the WPGYM WordPress plugin, with an SQL Injection vulnerability present in versions up to 67.8.0. The flaw arises from insufficient parameter escaping and lack of proper query preparation in these functions: MJ_gmgt_delete_class_limit_for_member, MJ_gmgt_get_yearly_income_ex...

CVE-2024-49784

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in storage of encrypted data with AES encryption and CBC mode. If an authenticated remote attacker with access to the database or a local attacker with access to server files could extract the encrypted data values...

CVE-2025-40711

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/VerFacturaPDF...

CVE-2025-40714

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo idfactura in /FacturaE/listadofacturasficha.jsp...

ROS-20250710-06

The Redis database management system DBMS vulnerability is related to boundary checking errors in parsing file names. Exploitation of the vulnerability could allow an attacker to execute arbitrary code...

PT-2025-28965 · WordPress · Events Manager – Calendar

Name of the Vulnerable Software and Affected Versions: Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions prior to 7.0.4 Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress version 6.6.5 Description: The Events Manager plugin for WordPre...

CVE-2025-40713

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/FacturaE/BusquedasFacturasSesion...

CVE-2025-40714

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo idfactura in /FacturaE/listadofacturasficha.jsp...

CVE-2025-40716

CVE-2025-40716 is a SQL injection in Quiter Gateway prior to v4.7.0, exploitable via the suceso.contenido mensaje parameter in /QMSCliente/Sucesos.action. The flaw enables an attacker to retrieve, create, update and delete databases through that endpoint. Affected product: Quiter Gateway; vulnera...

CVE-2025-40716 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action...

CVE-2025-40712

CVE-2025-40712 describes a SQL injection in Quiter Gateway, affecting versions prior to 4.7.0. The vulnerability allows an attacker to retrieve, create, update, and delete databases via the id_concesion parameter in the endpoint path “/FacturaE/DescargarFactura.” Impact is described as high/confi...

CVE-2025-40711 SQL injection vulnerability in Quiter Gateway

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the idconcesion parameter in /FacturaE/VerFacturaPDF...

CVE-2025-53527

WeGIA is affected by a Time-Based Blind SQL Injection in the almox parameter of the /controle/relatorio_geracao.php endpoint. Exploitation allows injecting arbitrary SQL, potentially exposing sensitive data, depending on database configuration. The vulnerability is noted across multiple sources, ...

CVE-2025-48367 Redis DoS Vulnerability due to bad connection error handling

Redis is an open source, in-memory database that persists on disk. An unauthenticated connection can cause repeated IP protocol errors, leading to client starvation and, ultimately, a denial of service. This vulnerability is fixed in 8.0.3, 7.4.5, 7.2.10, and 6.2.19...

CVE-2025-53006

DataEase is an open source business intelligence and data visualization tool. Prior to version 2.10.11, in both PostgreSQL and Redshift, apart from parameters like "socketfactory" and "socketfactoryarg", there are also "sslfactory" and "sslfactoryarg" with similar functionality. The difference li...

PHPGurukul Student Record System 安全漏洞

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter session in the file /session.php. An attacker can exploit this vulnerability to execute...

Student Record system Using PHP and MySQL SQL Injection Vulnerability

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

CVE-2025-0966 IBM InfoSphere Information Server SQL injection

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-0966 IBM InfoSphere Information Server SQL injection

IBM InfoSphere Information Server 11.7 vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

Code-Projects Inventory Management System 安全漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the categoriesStatus parameter of the /phpaction/createCategories.php file. An...