CVE-2018-25395 Kados R10 GreenBee SQL Injection via update_feature.php

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the featureid parameter of boardsbuttons/updatefeature.php. The featureid value is concatenated directly into SQL statements withou...

CVE-2018-25395 Kados R10 GreenBee SQL Injection via update_feature.php

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the featureid parameter of boardsbuttons/updatefeature.php. The featureid value is concatenated directly into SQL statements withou...

CVE-2018-25395

Kados R10 GreenBee is affected by an SQL injection via boards_buttons/update_feature.php in the feature_id parameter. The feature_id is concatenated directly into SQL statements without sanitization, enabling unauthenticated attackers to send crafted GET requests (including UNION-based payloads) ...

PT-2026-44873

Name of the Vulnerable Software and Affected Versions Kados R10 GreenBee affected versions not specified Description An SQL injection issue exists that allows unauthenticated attackers to execute arbitrary SQL queries. This occurs because the feature id parameter in the 'boards buttons/update...

CVE-2019-14066

CVE-2019-14066 describes an integer overflow in calculating the estimated output buffer size when retrieving a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Qualcomm Snapdragon ecosystems (e.g., Kamorta, MDM9205/9607, Nicobar, QCS404/405, Rennell, SA6155P, SC7180/...

CVE-2019-14066: Integer Overflow or Wraparound

Integer overflow in calculating estimated output buffer size when getting a list of installed Feature IDs, Serial Numbers or checking Feature ID status in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2004-1806

SQL injection vulnerability in index.cfm in CFWebstore 5.0 allows remote attackers to execute SQL commands via the 1 categoryid, 2 productid, or 3 featureid parameters...