CVE-2020-15363

The Nexos theme through 1.7 for WordPress allows side-map/?searchorder= SQL Injection...

WordPress gVectors wpDiscuz plugin SQL Injection Vulnerability

WordPress is a blogging platform from the WordPress Foundation developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gVectors wpDiscuz is a responsive commenting plugin with real-time discussion functionality that is used in... A SQL injecti...

Sql injection

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

PT-2020-13630

Name of the Vulnerable Software and Affected Versions wpDiscuz plugin versions 5.3.5 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands via the order parameter of a "wpdLoadMoreComments" request. Recommendations For wpDiscuz plugin versions 5.3...

CVE-2020-13640: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

CVE-2020-12461

PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sortorder GET parameter on the members.php members search page. This parameter allows for control over anything after the...

CVE-2018-16357

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter...

CVE-2018-16357

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter...

Sql injection

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter...

CVE-2018-16356

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter...

CVE-2018-16356: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/List/index order parameter...

PT-2020-8558

Name of the Vulnerable Software and Affected Versions: PbootCMS affected versions not specified Description: An issue was discovered in PbootCMS, where there is a SQL injection via the "api.php/Cms/search" endpoint, specifically through the order parameter. Recommendations: At the moment, there i...

PT-2020-8557

Name of the Vulnerable Software and Affected Versions: PbootCMS affected versions not specified Description: An issue was discovered in PbootCMS, where there is a SQL injection via the "api.php/List/index" endpoint, specifically through the order parameter. Recommendations: At the moment, there i...

CVE-2018-16357: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in PbootCMS. There is a SQL injection via the api.php/Cms/search order parameter...

CVE-2019-12918

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. The affected file is softwarelibrary.php and affected parameters are order0column and order0dir...

CVE-2016-10940

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

CVE-2016-10940

CVE-2016-10940 refers to the WordPress plug‑in zm-gallery 1.0, which is vulnerable to SQL injection through the order parameter. The Nuclei template and related sources describe the condition as a SQL injection that could allow an attacker to execute arbitrary SQL commands, potentially exposing o...

CVE-2017-18614

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter...

CVE-2016-10940: Improper Neutralization of Special Elements used in an SQL Command

The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter...

PT-2019-8545

Name of the Vulnerable Software and Affected Versions kama-clic-counter plugin version 3.4.9 Description The issue concerns SQL injection via the order parameter in the "admin.php" endpoint. This allows for potential exploitation by injecting malicious SQL code. Recommendations For...