Lucene search
+L

30 matches found

Github Security Blog
Github Security Blog
•added 2022/12/19 3:30 p.m.•48 views

laravel-jqgrid vulnerable to SQL Injection

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is...

9.8CVSS3.4AI score0.00702EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2022/12/19 2:15 p.m.•42 views

CVE-2021-4262

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is...

9.8CVSS0.00702EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/19 2:15 p.m.•42 views

Sql injection

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is...

7.5CVSS9.8AI score0.00702EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/19 12:00 a.m.•7 views

CVE-2021-4262: Improper Neutralization

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is...

9.8CVSS5.4AI score0.00702EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/12/19 12:00 a.m.•7 views

PT-2022-11635

Name of the Vulnerable Software and Affected Versions laravel-jqgrid affected versions not specified Description A critical issue was found in the getRows function of the EloquentRepositoryAbstract.php file, which can lead to sql injection. Recommendations Apply the patch...

9.8CVSS0.00702EPSS
SaveExploits0References7
Mend
Mend
•added 2022/12/19 12:00 a.m.•8 views

CVE-2021-4262

A vulnerability classified as critical was found in laravel-jqgrid. Affected by this vulnerability is the function getRows of the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php. The manipulation leads to sql injection. The name of the patch is...

9.8CVSS0.00702EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2022/12/19 12:00 a.m.•17 views

Laravel SQL injection vulnerability

Laravel is a web application framework from the Laravel community. A security vulnerability exists in laravel-jqgrid, which stems from a problem with the function getRows in the file src/Mgallegos/LaravelJqgrid/Repositories/EloquentRepositoryAbstract.php, which can lead to sql injection...

9.8CVSS8.2AI score0.00702EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
•added 2017/01/10 12:00 a.m.•60 views

Microsoft Windows ADO Recordset GetRows Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

7.6CVSS1.5AI score0.17016EPSS
SaveExploits0References1
seebug.org
seebug.org
•added 2015/03/18 12:00 a.m.•30 views

KingCms最新版(k9)注入1枚

简要描述: KingCms最新版(k9)注入1枚 详细说明: 朋友的公司想购买kingcms的授权,让我帮忙看下。发现kingcms很长一段时间没更新了,憋了一段时间放出了最新版的k92014-12-13更新,官网下下来学习一下。 在wooyun上看到了几个漏洞,如: WooYun: kingcms最新版sql注入漏洞 注入点:POST /apps/jianli/index.php HTTP/1.1 注入参数:where 问题文件在/apps/jianli/index.php function create $u=new user;$u-authrole'jianli'; $db=new...

7AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•54 views

Achievo <= 1.3.4 - SQL Injection

No description provided by source. Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in Achievo 1. Advisory Information Title: SQL Injection in Achievo Advisory ID: BONSAI-2009-0102 Advisory URL:...

7.5CVSS6.5AI score0.01256EPSS
SaveExploits7
Rows per page
Query Builder