pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

WordPress Plugin: The Events Calendar SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

FreePBX endpoint Database Access Code Execution

The vulnerability of the “endpoint” web interface module in the FreePBX IP-telephony system relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the database and execute arbitrary code...

CVE-2023-40275

An issue was discovered in OpenClinic GA 5.247.01. It allows retrieval of patient lists via queries such as findFirstname= to common/search/searchByAjax/patientslistShow.jsp...

PHP-MYSQL-User-Login-System Unauthorized Access

The vulnerability of the /login.php component of the PHP-MYSQL-User-Login-System registration and login system is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the...

MSSQL Database Storage Backend SQL Injection

The vulnerability of the MSSQL Database Storage Backend component in the HashiCorp Vault and Vault Enterprise archiving platforms relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows attackers to execute arbitrary SQL commands...

FortiWAN traffic balancing web interface Code Execution

The vulnerability of the FortiWAN traffic balancing system’s web interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted HTTP requests...

WordPress SQL Injection Vulnerability (CNVD-2017-34851)

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress WPDB SQL injection vulnerability can be exploited by an attacker to execute arbitrary SQL commands due to...

OFFL <= 0.2.6 (teams.php fflteam) Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ OFFL = 0.2.6 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz Discovered On:...

Simple Customer 1.2 (contact.php id) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Simple Customer 1.2 SQL Injection Vulnerabilitys +==-- --==+================================================================================+==-- Discovered By:...

Affiliate Directory (cat_id) Remote SQL Injection Vulnerbility

No description provided by source. --==+================================================================================+==-- --==+ Affiliate Directory SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz &...