CVE-2017-20244

Wow Forms WordPress Plugin version 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to read arbitrary database information by exploiting an unescaped POST parameter. Attackers can inject SQL code through the 'mwpformid' parameter in requests to the admin-ajax.php...

CVE-2016-9283: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in framework/core/subsystems/expRouter.php in Exponent CMS v2.4.0 allows remote attackers to read database information via address/addContentToSearch/id/ and a trailing string, related to a "sef URL" issue...

PT-2016-7721

Name of the Vulnerable Software and Affected Versions Exponent CMS version 2.4.0 Description The issue allows remote attackers to read database information. This is related to a "sef URL" issue in the address/addContentToSearch/id/ endpoint. Recommendations For Exponent CMS version 2.4.0, update ...

CVE-2014-9249

The default configuration of Zenoss Core before 5 allows remote attackers to read or modify database information by connecting to unspecified open ports, aka ZEN-15408...