Besttem Network Marketing Software SQL Injection Vulnerability

Besttem Network Marketing Software is a network marketing software from Besttem Turkey. A SQL injection vulnerability exists in Besttem Network Marketing Software versions prior to 1.0.2309.6, which stems from improper neutralization of special elements...

Tura Signalix Portal SQL Injection Vulnerability

Tura Signalix Portal is an application from Tura. A SQL injection vulnerability exists in Tura Signalix Portal version 7T0228 that stems from improper neutralization of special elements...

CVE-2023-4831: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914...

CVE-2023-4766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection. This issue affects Movus: before 20230913...

CVE-2023-4832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection.This issue affects Company Management: before 3072...

CVE-2023-36805: Improper Neutralization of Special Elements used in a Command

Windows MSHTML Platform Security Feature Bypass Vulnerability...

CVE-2023-39319: Improper Neutralization of Input During Web Page Generation

The html/template package does not apply the proper rules for handling occurrences of "...

CVE-2023-39318: Improper Neutralization of Input During Web Page Generation

The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "!" comment tokens, in...

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection. This issue affects E-commerce Software: before 20230901...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Osoft Paint Production Management allows SQL Injection.This issue affects Paint Production Management: before 2.1...

Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

Impact Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix ts SSO.init'javascript:alert"javascript successfully injected"' Patches This vulnerability was patched on version 0.1.0 Workarounds This vulnerability can be prevented if...

CVE-2023-41049 Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are...

Sql injection

An Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in the Schweitzer Engineering Laboratories SEL-5030 acSELerator QuickSet Software could allow an attacker to embed instructions that could be executed by an authorized device operator. See...

CVE-2023-4478: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

CVE-2023-40185: Improper Neutralization of Escape, Meta, or Control Sequences

shescape is simple shell escape library for JavaScript. This may impact users that use Shescape on Windows in a threaded context. The vulnerability can result in Shescape escaping or quoting for the wrong shell, thus allowing attackers to bypass protections depending on the combination of expecte...

CVE-2023-3954: Improper Neutralization of Input During Web Page Generation

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2023-39971: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation vulnerability in AcyMailing Enterprise component for Joomla allows XSS. This issue affects AcyMailing Enterprise component for Joomla: 6.7.0-8.6.3...