3048 matches found
ClickHouse 环境问题漏洞
ClickHouse is a ClickHouse open source one of the fastest and most resource efficient open source databases for real-time applications and analytics. A security vulnerability exists in ClickHouse that originates when a query contains large uncompressed malicious external data, which allows an...
WordPress plugin CardGate CardGate Payments for WooCommerce SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...
jerryhanjj ERP 安全漏洞
jerryhanjj ERP is an ERP import, export, storage and marketing system developed by Jerry's personal developer. A security vulnerability exists in jerryhanjj ERP version 1.0, which is caused by a SQL injection in the setpassword function of home.php...
CVE-2025-27686
Dell Unisphere for PowerMax, versions prior to 10.2.0.9 and PowerMax versions prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query 'LDAP Injection' vulnerability. A high privileged attacker with remote access could potentially exploit this...
PHPGurukul Men Salon Management System 注入漏洞
PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Men Salon Management System version 1.0, which stems from an incorrect manipulation of the parameter contactnumber that can lead to SQL injection...
CVE-2025-3265
A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /add-category.php. The manipulation of the argument Category leads to sql injection. The attack can be launched remotely. The exploi...
PHPGurukul e-Diary Management System 注入漏洞
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Category of the dashboard.php file. An attacker can...
CodeAstro Student Grading System 安全漏洞
CodeAstro Student Grading System is a student grading system from CodeAstro. A security vulnerability exists in CodeAstro Student Grading System version 1.0, which stems from an incorrect manipulation of the parameter studentId that can lead to SQL injection...
PT-2025-14779 · Unknown · Phpgurukul Time Table Generator System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Time Table Generator System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/edit-class.php. The manipulation of the editid argument leads to SQL injection. This...
CVE-2025-3119
A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/managecourse.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit...
SourceCodester Online Tutor Portal 注入漏洞
SourceCodester Online Tutor Portal is a SourceCodester open source online tutor portal. An injection vulnerability exists in SourceCodester Online Tutor Portal version 1.0, which stems from the fact that incorrect manipulation of a parameter ID can lead to SQL injection...
vipshop Saturn SQL注入漏洞
vipshop Saturn is a platform that provides distributed, fault-tolerant, and highly available job scheduling services from China's Vipshop vipshop company. A security vulnerability exists in vipshop Saturn 3.5.1 and earlier versions, which stems from a SQL injection in the zkClusterKey component...
PT-2025-14380 · Unknown · Clinic'S Patient Management System
Name of the Vulnerable Software and Affected Versions: Clinic’s Patient Management System version 2.0 Description: The issue is related to a SQL injection vulnerability in the login page. Recommendations: For Clinic’s Patient Management System version 2.0, update to a version that fixes the SQL...
PT-2025-14074 · Unknown · Rj Quickcharts
Name of the Vulnerable Software and Affected Versions: randyjensen RJ Quickcharts versions 0.6.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. To...
PHPGurukul e-Diary Management System 安全漏洞
The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the Category parameter of the edit-category.php?id=8 file. An attacker ca...
Sourcecodester Online Exam System 安全漏洞
Sourcecodester Online Exam System is a SourceCodester open source online exam system. A security vulnerability exists in Sourcecodester Online Exam System version 1.0, which originates from a SQL injection in dash.php...
WordPress plugin Advanced Google reCAPTCHA SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A SQL injection vulnerability exists in WordPress...
Bank Locker Management System search-report-details.php File SQL Injection Vulnerability
Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of the search-report-details.php file. An attacker ca...
CVE-2025-2852
A vulnerability has been found in SourceCodester Food Ordering Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menus/viewmenu.php. The manipulation of the argument ID leads to sql injection. The attack can be...