CVE-2021-28890

J2eeFAST 2.2.1 allows remote attackers to perform SQL injection via the 1 compId parameter to fast/sys/user/list, 2 deptId parameter to fast/sys/role/list, or 3 roleId parameter to fast/sys/role/authUser/list, related to the use of $ to join SQL statements...

PT-2014-2360

Name of the Vulnerable Software and Affected Versions dotProject versions prior to 2.1.7 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This can be achieved via several parameters in different actions to "index.php", including the search string...