20 matches found
CVE-2026-89232
The Recordbrowser WordPress plugin version 1.1.7 and below is vulnerable to an unauthenticated SQL injection vulnerability. The root cause is the failure to properly sanitize and escape the 'recordid' parameter before including it in a SQL query. This allows an unauthenticated attacker to append ...
CVE-2026-89232 RecordBrowser <= 1.1.7 - Unauthenticated SQLi via 'recordid' Parameter
The Recordbrowser WordPress plugin through 1.1.7 does not sanitise and escape a parameter before using it in a SQL query, allowing unauthenticated attackers to append additional SQL queries and extract sensitive information from the database...
EUVD-2006-2039
Malware in sbrugna...
CVE-2024-1012
A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...
Wanhu ezOFFICE SQL Injection Vulnerability
Wanhu ezOFFICE is a comprehensive office suite software from Wanhu, a Chinese company. A SQL injection vulnerability exists in Wanhu ezOFFICE version 11.1.0, which originates in defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp, which contains unknown processing that can lead to SQL...
PT-2024-16042 · Wanhu · Wanhu Ezoffice
Name of the Vulnerable Software and Affected Versions: Wanhu ezOFFICE version 11.1.0 Description: A critical issue has been found in the processing of the file defaultroot/platform/bpm/work flow/operate/wf printnum.jsp. The manipulation of the recordId argument leads to sql injection. The attack...
CVE-2024-1012: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in Wanhu ezOFFICE 11.1.0. This issue affects some unknown processing of the file defaultroot/platform/bpm/workflow/operate/wfprintnum.jsp. The manipulation of the argument recordId leads to sql injection. The attack may be initiate...
CVE-2017-1002010
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...
CVE-2017-1002009: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the delete function...
PT-2017-10998
Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability. It occurs because the code in the updateDB.php file does not properly sanitize user input via the recordId variable in the delete function...
PT-2017-10999
Name of the Vulnerable Software and Affected Versions Membership Simplified version 1.58 Description The issue concerns a blind SQL injection vulnerability in the Membership Simplified plugin for WordPress. Specifically, the code in the updateDB.php file is vulnerable because it fails to sanitize...
CVE-2017-1002010: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in wordpress plugin Membership Simplified v1.58, The code in membership-simplified-for-oap-members-only/updateDB.php is vulnerable to blind SQL injection because it doesn't sanitize user input via recordId in the deletemedia function...
Thousand OA collaborative office management platform GovReceiveFileAction. do RecordID parameter id injection vulnerability
No description provided by source...
万户办公OA平台 jigeObj.jsp 参数RecordID SQL注入漏洞
No description provided by source...
万户OA系统 DocumentEdit.jsp 参数RecordID SQL注入漏洞
No description provided by source...
金蝶协作办公系统 /kingdee/Template/TemplateEdit.jsp 参数 RecordID SQL注射
No description provided by source...
金蝶协作办公系统 /kingdee/DocumentSave.jsp 参数 RecordID SQL注射
No description provided by source...
FILE SHARE v1.0 SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================== FILE SHARE v1.0 SQL Injection Vulnerability =========================================== / Software Information / Vendor : http://www.script-ati.com / script : FILE SHARE V 1.0 / Download :...
File Share 1.0 - SQL Injection
File Share 1.0 - SQL Injection - Alg3r!eN H4xoRz - - FILE SHARE V 1.0 SQL Injection Vulnerability - Author : TOP SAT 13 - MAIL : [email protected] 'Or' [email protected] / Software Information / Vendor : http://www.script-ati.com / script : FILE SHARE V 1.0 / Download : http://www.script-ati.com /...
File Share 1.0 - SQL Injection
Alg3r!eN H4xoRz - - FILE SHARE V 1.0 SQL Injection Vulnerability - Author : TOP SAT 13 - MAIL : [email protected] 'Or' [email protected] / Software Information / Vendor : http://www.script-ati.com / script : FILE SHARE V 1.0 / Download : http://www.script-ati.com / Vulnerability : php SQL injection /...