CVE-2024-12016

CM Informatics CM News (up to v6.0) contains an SQL Injection flaw arising from improper neutralization of special elements in SQL commands. The issue is documented as CVE-2024-12016 and is described across multiple sources as affecting CM News through version 6.0, with a guest note that the vend...

CVE-2024-12016 SQLi in CM Informatics' CM News

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CM Informatics CM News allows SQL Injection. This issue affects CM News: through 6.0. NOTE: The vendor was contacted and it was learned that the product is not supported...

CM Informatics CM News SQL注入漏洞

CM Informatics CM News is a news site from CM Informatics, Inc. A SQL injection vulnerability exists in CM Informatics CM News version 6.0 and earlier, which stems from improper neutralization of special elements in SQL commands and could lead to a SQL injection attack...

CVE-2024-12097

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Boceksoft Informatics E-Travel allows SQL Injection. This issue affects E-Travel: before 15.12.2024...

CVE-2024-12097 SQLi in Boceksoft Informatics' E-Travel

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Boceksoft Informatics E-Travel allows SQL Injection. This issue affects E-Travel: before 15.12.2024...

Boceksoft Informatics E-Travel SQL注入漏洞

Boceksoft Informatics E-Travel is an application from Boceksoft. A SQL injection vulnerability exists in Boceksoft Informatics E-Travel versions prior to 15.12.2024, which stems from the presence of SQL injection...

CVE-2024-7016

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Smarttek Informatics Smart Doctor's allows Stored XSS required admin privileges. This issue affects Smart Doctor: through 21.11.2024. NOTE: The vendor was contacted early about this disclosu...

CVE-2024-1107

Authorization Bypass Through User-Controlled Key vulnerability in Talya Informatics Travel APPS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Travel APPS: before v17.0.68...

CVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

CVE-2024-8950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

CVE-2024-8950

CVE-2024-8950 concerns an SQL Injection in Arne Informatics’ Piramit Automation. The vulnerability stems from improper neutralization of special elements in SQL commands, enabling Blind SQL Injection. Affected: Piramit Automation versions prior to 27.09.2024. Impact is described as high for confi...

CVE-2024-8950 SQLi in Arne Informatics' Piramit Automation

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Arne Informatics Piramit Automation allows Blind SQL Injection. This issue affects Piramit Automation: before 27.09.2024...

Arne Informatics Piramit Automation SQL注入漏洞

Arne Informatics Piramit Automation is an application from Arne Informatics, Inc. An SQL injection vulnerability exists in Arne Informatics Piramit Automation versions prior to 27.09.2024 that stems from an improper neutralization of a special element...

CVE-2024-10476

Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as protected health information PHI and personally identifiable information PII. Exploitation of this...

CVE-2024-8972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972 SQLi in Mobil365 Informatics' Saha365 App

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

CVE-2024-8972

CVE-2024-8972 describes an SQL injection in Mobil365 Informatics’ Saha365 App caused by improper neutralization of special elements in SQL commands. Affected: Saha365 App prior to 30.09.2024. Root cause: improper neutralization of dynamic SQL. Impact as per sources: high confidentiality, integrit...

Mobil365 Informatics Saha365 SQL注入漏洞

Mobil365 Informatics Saha365 is an application from Mobil365 Informatics, Inc. Mobil365 Informatics Saha365 suffers from a SQL injection vulnerability that stems from an improper neutralization of a special element...