CVE-2024-12097

CVE-2024-12097 affects Boceksoft Informatics E-Travel (versions before 15.12.2024). The issue is an SQL Injection due to improper neutralization of special elements in SQL commands. Per the NVD metrics, it is a Network-exposed vulnerability with no authentication, low attack complexity, and user ...

CVE-2024-12097 SQLi in Boceksoft Informatics' E-Travel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Boceksoft Informatics E-Travel allows SQL Injection. This issue affects E-Travel: before 15.12.2024...

CVE-2024-12097 SQLi in Boceksoft Informatics' E-Travel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Boceksoft Informatics E-Travel allows SQL Injection.This issue affects E-Travel: before 15.12.2024...

Linux Distros Unpatched Vulnerability : CVE-2021-47647

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: clk: qcom: ipq8074: fix PCI-E clock oops Fix PCI-E clock related kernel oops that are caused...

Boceksoft Informatics E-Travel SQL注入漏洞

Boceksoft Informatics E-Travel is an application from Boceksoft. A SQL injection vulnerability exists in Boceksoft Informatics E-Travel versions prior to 15.12.2024, which stems from the presence of SQL injection...

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

CVE-2024-9149

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

CVE-2024-9149 SQLi in Wind Media's E-Commerce Website Template

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Wind Media E-Commerce Website Template allows SQL Injection. This issue affects E-Commerce Website Template: before v1.5...

CVE-2024-9149

CVE-2024-9149 describes an SQL injection vulnerability in Wind Media E-Commerce Website Template, affecting versions before v1.5. The issue arises from improper neutralization of special elements in SQL commands within the template’s code. Practical impact as stated: high confidentiality impact a...

WordPress WP e-Customers Beta plugin <= 0.0.1 - Reflected Cross-Site Scripting vulnerability

Reflected Cross-Site Scripting vulnerability discovered by Hassan Khan Yusufzai - Splint3r7 in WordPress Plugin WP e-Customers Beta versions = 0.0.1...

Wind Media E-Commerce Website Template SQL注入漏洞

Wind Media E-Commerce Website Template is an e-commerce template from Wind Media, Inc. A SQL injection vulnerability exists in Wind Media E-Commerce Website Template versions prior to v1.5, which stems from susceptibility to SQL injection attacks...

e-hotel.vn Cross Site Scripting vulnerability OBB-4031793

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zz 安全漏洞

zz is an e-commerce platform for zj1983 individual developers. A security vulnerability exists in zz 2024-8 and prior versions that stems from improper authorization...

CVE-2025-1808

A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...

CVE-2025-1808 Pixsoft E-Saphira Login Endpoint servlet sql injection

A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...

CVE-2025-1808 Pixsoft E-Saphira Login Endpoint servlet sql injection

A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated...

CVE-2025-1808

CVE-2025-1808 affects Pixsoft E-Saphira 1.7.24. The vulnerability exists in the Login Endpoint, specifically in the file path /servlet?act=login&tipo=1, where manipulating the argument txtUsuario leads to an SQL injection. It is exploitable remotely and exploitation has been disclosed publicly. M...

zz 注入漏洞

zz is an e-commerce platform for zj1983 individual developers. An injection vulnerability exists in zz 2024-8 and prior versions, which stems from SQL injection and could lead to remote code execution...

Mini-Tmall 跨站脚本漏洞

Mini-Tmall is Mini-Tmall open source Spring Boot based on a comprehensive B2C e-commerce platform . Used to build an e-commerce platform to provide commodity trading services. A cross-site scripting vulnerability exists in Mini-Tmall 20250211 and previous versions. Attackers can use the...