CVE-2019-1010259

SaltStack Salt 2018.3, 2019.2 is affected by: SQL Injection. The impact is: An attacker could escalate privileges on MySQL server deployed by cloud provider. It leads to RCE. The component is: The mysql.userchpass function from the MySQL module for Salt. The attack vector is: specially crafted...

CVE-2018-10757

CSP MySQL User Manager 2.3.1 allows SQL injection, and resultant Authentication Bypass, via a crafted username during a login attempt...

Entrepreneur Job Portal Script 2.06 - SQL Injection

x========================================================================================================================================x | Title : Entrepreneur Job Portal Script SQL Injection | Software : Entrepreneur Job Portal Script | Version : 2.06 | Vendor : http://www.i-netsolution.com/ |...

Geeklog exploit

Following is an example of how MySQL SQL injections can be exploited, and also how suppressing error messages isn't sufficient as a solution, as proposed in some earlier postings. It was also included in Geeklog 1.3.8-1sr1 security update even though the developers noted it's not a complete...