TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A security vulnerability exists in TONGDA Office Anywhere version 11.10, which originates from a SQL injection vulnerability in the parameter deleteSTR in the file setprint/delete.php...

SourceCodester Simple Book Catalog App SQL Injection Vulnerability

Simple Book Catalog App is a simple book catalog application by the individual developer Remy Andrade. A SQL injection vulnerability exists in SourceCodester Simple Book Catalog App version 1.0, which stems from an unknown function in the file deletebook.php that causes a sql injection via the...

CVE-2023-39122

BMC Control-M through 9.0.20.200 allows SQL injection via the /RF-Server/report/deleteReport report-id parameter. This is fixed in 9.0.21 and is also fixed by a patch for 9.0.20.200...

CVE-2022-46047

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

CVE-2022-46047

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

CVE-2022-46047

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

PT-2022-27720

Name of the Vulnerable Software and Affected Versions AeroCMS version 0.0.1 Description The issue is related to SQL Injection via the delete parameter. This allows for potential manipulation of database queries, which could lead to unauthorized data access or modification. Recommendations For...

CVE-2022-46047

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

CVE-2022-46047: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 is vulnerable to SQL Injection via the delete parameter...

CVE-2022-30508

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter...

CVE-2022-30508

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter...

Arbitrary file deletion

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter...

CVE-2022-30508

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter...

CVE-2022-30508: Improper Limitation of a Pathname to a Restricted Directory

DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter...

Desdev DedeCMS 路径遍历漏洞

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. DedeCMS v5.7.93 version of a security...

PT-2022-20146 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.93 Description: The issue is related to an arbitrary file deletion vulnerability. It affects the upload.php file via the delete parameter. Recommendations: For DedeCMS version 5.7.93, consider restricting access to the...

CVE-2020-19212

SQL Injection vulnerability in admin/grouplist.php in piwigo v2.9.5, via the group parameter to delete...

CVE-2020-5513

Gila CMS 1.11.8 allows /cm/delete?t=../ Directory Traversal...

Simply-Blog SQL Injection Vulnerability

Simply-Blog is a versatile content management panel based on PHP and MySQL. A SQL injection vulnerability exists in the admin/deleteCategories.php file in Simply-Blog 2019-01-01 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands with the help ...

PT-2019-16599

Name of the Vulnerable Software and Affected Versions Simply-Blog versions prior to 2019-01-01 Description The issue is related to SQL Injection, which can be exploited via the delete parameter in the "admin/deleteCategories.php" API endpoint. Recommendations For Simply-Blog versions prior to...