PT-2019-13507

Name of the Vulnerable Software and Affected Versions Ovidentia version 8.4.3 Description The issue is related to SQL Injection, which occurs via the id parameter in an "index.php?tg=delegat&idx=mem" request. Recommendations For Ovidentia version 8.4.3, avoid using the id parameter in the affecte...

PT-2019-13498

Name of the Vulnerable Software and Affected Versions Metinfo versions 6.x Description The issue allows SQL Injection via the id parameter in an "admin/index.php?n=ui set&m=admin&c=index&a=doget text content&table=lang&field=1" request. Recommendations For Metinfo version 6.x, consider restrictin...

PT-2019-4733

Name of the Vulnerable Software and Affected Versions SiTex-Госуслуги affected versions not specified Description The issue is related to the lack of protection for the web page structure in the SiTex component. This could allow a remote attacker to perform cross-site scripting attacks by...

CVE-2019-11827

Cross-site scripting XSS vulnerability in SYNO.NoteStation.Shard in Synology Note Station before 2.5.3-0863 allows remote attackers to inject arbitrary web script or HTML via the objectid parameter...

PT-2019-12512 · Synology · Note Station

Name of the Vulnerable Software and Affected Versions: Synology Note Station versions prior to 2.5.3-0863 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the object id parameter. Recommendations: For versions prior to 2.5.3-0863, update...

PT-2019-11675 · WordPress · Ultimate Member

Name of the Vulnerable Software and Affected Versions: Ultimate Member plugin version 2.39 Description: An issue in the Ultimate Member plugin for WordPress allows unauthorized modification of user profiles and cover pictures. Once connected, an attacker can modify the profile and cover picture o...

CVE-2018-17388

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to logincheck.php, or the id parameter to addemail.php or editcontent.php...

CVE-2018-17393

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php...

CVE-2018-17399

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

Sql injection

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php...

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

CVE-2018-17393: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php...

PT-2019-9462

Name of the Vulnerable Software and Affected Versions HealthNode Hospital Management System version 1.0 Description The issue exists due to SQL Injection in the HealthNode Hospital Management System. This can be exploited via the id parameter to "dashboard/Patient/info.php" or...

CVE-2018-17386: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATHINFO to mydeals/ or listdeals/...

PT-2019-9464

Name of the Vulnerable Software and Affected Versions Joomla! component Jimtawl version 2.2.7 Description A SQL Injection issue exists in the Jimtawl component for Joomla!, which can be exploited via the id parameter. Recommendations For Jimtawl version 2.2.7, avoid using the id parameter in the...

CVE-2018-17399: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Jimtawl 2.2.7 component for Joomla! via the id parameter...

PT-2019-9458

Name of the Vulnerable Software and Affected Versions Micro Deal Factory version 2.4.0 Description The issue exists due to SQL Injection in the Micro Deal Factory component for Joomla. This can be exploited via the id parameter or the PATH INFO to "mydeals/" or "listdeals/". Recommendations For...

Sql injection

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...

CVE-2019-12372

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...

CVE-2019-12372: Improper Neutralization of Special Elements used in an SQL Command

Petraware pTransformer ADC before 2.1.7.22827 allows SQL Injection via the User ID parameter to the login form...