7 matches found
CVE-2019-9083
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued...
Sql injection
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued...
PT-2019-19352
Name of the Vulnerable Software and Affected Versions SQLiteManager versions 1.20 through 1.24 Description The issue allows SQL injection via the "/sqlitemanager/main.php" API endpoint, specifically through the dbsel parameter. This product is discontinued. Recommendations For SQLiteManager...
CVE-2019-9083: Improper Neutralization of Special Elements used in an SQL Command
SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued...
CVE-2012-5105
CVE-2012-5105 affects SQLiteManager 1.2.4 and involves multiple cross-site scripting (XSS) vulnerabilities. Vulnerability details from connected sources show that remote attackers can inject arbitrary web script or HTML via the dbsel parameter to main.php or index.php, or via the nsextt parameter...
CVE-2012-5105: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in SQLiteManager 1.2.4 allow remote attackers to inject arbitrary web script or HTML via the dbsel parameter to 1 main.php or 2 index.php; or 3 nsextt parameter to index.php...
PT-2012-5774
Name of the Vulnerable Software and Affected Versions SQLiteManager version 1.2.4 Description The issue allows remote attackers to inject arbitrary web script or HTML. This can be achieved via the dbsel parameter to "main.php" or "index.php", or the nsextt parameter to "index.php". Recommendation...