CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

Sql injection

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

CVE-2022-26245

Falcon-plus v0.3 was discovered to contain a SQL injection vulnerability via the parameter grpName in /config/service/host.go...

CVE-2022-26245

Falcon-plus v0.3 contains a SQL injection in the grpName parameter of /config/service/host.go. The CVE entry CVE-2022-26245 is described consistently across sources, with high/critical impact (CVSS v3.1: 9.8) and network attack vector with no authentication; impact includes confidentiality, integ...

Falcon SQL注入漏洞

Falcon is an embedded programming language. An SQL injection vulnerability exists in Falcon-plus v0.3, which originates from the grpName parameter in /config/service/host.go. An attacker could exploit this vulnerability to cause SQL injection...

CVE-2022-25517

A flaw was found in MyBatis Plus. The issue contains a SQL Injection vulnerability...

SQL Injection

com.baomidou:mybatis-plus-core is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the column parameter in AbstractWrapper.java allows a malicious user to inject and execute arbitrary SQL queries on the target system...

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages, related to pointer swapping errors, allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to errors in pointer assignment during the execution of the EMRCOMMENTEMFPLUS field in EMF files. Exploiting this vulnerability can allow an attacker to execute arbitrary code by opening a malicious pa...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

Sql injection

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

Apache MyBatis SQL注入漏洞

Apache MyBatis is the United States Apache Apache Foundation of an excellent persistence layer framework . Support for custom SQL, stored procedures and advanced mapping , eliminating almost all of the JDBC code and set parameters and get the result set of work , you can use simple XML or...

CVE-2022-25517

Affected software: MyBatis Plus 3.4.3. Vulnerability: SQL injection via the Column parameter in /core/conditions/AbstractWrapper.java. Underlying cause: improper handling of the Column input leading to arbitrary SQL execution. Killer details about exploitability are not provided in the connected ...

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

PT-2022-17346 · Unknown · Mybatis Plus

Name of the Vulnerable Software and Affected Versions: MyBatis plus version 3.4.3 Description: The issue concerns a SQL injection vulnerability via the Column parameter in the /core/conditions/AbstractWrapper.java file. It is noted that the vendor considers the reported execution of a SQL stateme...

PT-2022-17635 · Unknown · Pfsense Ce +1

Name of the Vulnerable Software and Affected Versions: pfSense CE versions prior to 2.6.0 pfSense Plus versions prior to 22.01 Description: The issue is related to improper access control in pfSense CE and pfSense Plus, allowing a remote attacker with the privilege to change NTP GPS settings to...