CVE-2026-47236 Solidtime team page exposes pending invitation and member emails to employees who lack invitations:view/members:view permission

Solidtime is an open-source time-tracking app. Prior to version 0.12.2, Solidtime defines an explicit invitations:view and members:view permissions that gates the official invitations and members API. The Jetstream web team page authorizes access with only belongsToTeam and then loads and...

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

EUVD-2024-55326

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

CVE-2024-58307

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

CVE-2024-58307 CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

CVE-2024-58307 CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

CVE-2024-58307

CSZCMS 1.3.0 is affected by an authenticated SQL injection in the members view endpoint (view parameter). The vulnerability allows an authenticated attacker to manipulate queries, enabling time-based blind SQL injection and potential extraction of database information. Affected component: members...

PT-2025-50759

Name of the Vulnerable Software and Affected Versions CSZCMS version 1.3.0 Description The software contains an authenticated SQL injection issue in the members view functionality. Authenticated attackers can manipulate database queries by injecting malicious SQL code through the view parameter...

CVE-2024-58307: Improper Neutralization of Special Elements used in an SQL Command

CSZCMS 1.3.0 contains an authenticated SQL injection vulnerability in the members view functionality that allows authenticated attackers to manipulate database queries. Attackers can inject malicious SQL code through the view parameter to potentially execute time-based blind SQL injection attacks...

EUVD-2017-7389

Malware in sbrugna...

EUVD-2022-52300

Malicious code in bioql PyPI...

PT-2022-20081

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Social Networking Site version 1.0 Description The issue concerns SQL Injection via the /sns/admin/members/view member.php?id= endpoint. This allows for potential exploitation by injecting malicious SQL code through the i...

CVE-2022-27161

Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcmsadminMembersviewUsers...

CSZ CMS SQL注入漏洞

CSZ CMS is a PHP-based open source content management system CMS. cszcmsadminMembersviewUsers version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements and can be exploited by attackers to execute illegal SQL commands t...

PT-2022-17057

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter under the "/admin/?page=members/view member&id=2" API endpoint. Recommendations Fo...

PT-2022-17074

Name of the Vulnerable Software and Affected Versions Home Owners Collection Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter in the "/members/view member.php" API endpoint. Recommendations Fo...

Sokial Social Network Script SQL Injection Vulnerability

Sokial Social Network Script is a set of social networking site scripts. The script is used to create social network sites with content management, multi-language support and more. A SQL injection vulnerability exists in Sokial Social Network Script version 1.0. The vulnerability can be exploited...

CVE-2017-15973

Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/membersview.php...

CVE-2017-15973

CVE-2017-15973 affects Sokial Social Network Script 1.0. Multiple connected sources confirm a SQL Injection vulnerability reachable via the id parameter in admin/members_view.php. The issue stems from unvalidated input used in SQL queries, enabling attackers to craft malicious id values. Reported...