PT-2024-27727

Name of the Vulnerable Software and Affected Versions aEnrich Technology a+HRD affected versions not specified Description The issue concerns a lack of proper restrictions on a specific parameter in the front-end retrieval of system configuration values. This allows attackers to modify the...

BIT-GITLAB-2020-10955

GitLab EE/CE 11.1 through 12.9 is vulnerable to parameter tampering on an upload feature that allows an unauthorized user to read content available under specific folders...

SourceCodester Employee Management System Security Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead ...

CVE-2023-6838

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

CVE-2023-43336

Sangoma Technologies FreePBX before cdr 15.0.18, 16.0.40, 15.0.16, and 16.0.17 was discovered to contain an access control issue via a modified parameter value, e.g., changing extension=self to extension=101...

CVE-2023-5624

Under certain conditions, Nessus Network Monitor was found to not properly enforce input validation. This could allow an admin user to alter parameters that could potentially allow a blindSQL injection...

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

CVE-2023-4478 Parameter tampering in the registration resulting in blocked accounts to be created

Mattermost fails to restrict which parameters' values it takes from the request during signup allowing an attacker to register users as inactive, thus blocking them from later accessing Mattermost without the system admin activating their accounts...

PT-2023-27354

Name of the Vulnerable Software and Affected Versions Apache Airflow Spark Provider versions prior to 4.1.3 Description The issue allows an attacker to pass in malicious parameters when establishing a connection, giving an opportunity to read files on the Airflow server. Recommendations For...

CVE-2023-1547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51...

CVE-2023-1547

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection.This issue affects Parkmatik: before 02.01-a51...

CVE-2023-1547 SQLi in Elra Computers Parkmatik

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...

CVE-2023-1547 SQLi in Elra Computers Parkmatik

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...

CVE-2023-1547: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Elra Parkmatik allows SQL Injection through SOAP Parameter Tampering, Command Line Execution through SQL Injection. This issue affects Parkmatik: before 02.01-a51...

CVE-2023-35064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607...

CVE-2023-35064

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering. This issue affects Satos Mobile: before 20230607...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Satos Satos Mobile allows SQL Injection through SOAP Parameter Tampering.This issue affects Satos Mobile: before 20230607...

CVE-2023-35064

The CVE-2023-35064 issue affects Satos Mobile and is a SQL Injection via SOAP parameter tampering, caused by improper neutralization of special elements in SQL commands. Affected before 20230607. CVSS v3.1: 9.8 (CRITICAL); network access, no authentication or user interaction required, high impac...