30 matches found
PT-2023-28894 · Unknown · Taxonworks
Name of the Vulnerable Software and Affected Versions: TaxonWorks versions prior to 0.34.0 Description: A SQL injection issue was found in TaxonWorks, allowing authenticated attackers to extract arbitrary data from the database, including the users table, which may lead to information disclosure...
PT-2023-22377 · Unknown · Bt21 X Bts Wallpaper
Name of the Vulnerable Software and Affected Versions: BT21 x BTS Wallpaper app version 12 for Android Description: The issue allows unauthorized applications to request permission to insert data into the database that records user personal preferences. This data is loaded into memory when the...
PT-2023-22375 · Google · Android
Name of the Vulnerable Software and Affected Versions: Glitter Unicorn Wallpaper app for Android versions 7.0 through 8.0 Description: The issue allows unauthorized applications to inject data into the database that stores user personal preferences, which can be loaded into memory and used when t...
PT-2023-17043 · Unknown · Mobilmen Terminal
Name of the Vulnerable Software and Affected Versions: Mobilmen Terminal Software versions prior to 3 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...
PT-2023-9169 · Unknown · Schuhfried
Name of the Vulnerable Software and Affected Versions: SCHUHFRIED version 8.22.00 Description: The issue is related to the use of hardcoded credentials in the SCHUHFRIED system, which can be exploited by a remote attacker to obtain access to protected information using a specially crafted curl...
PT-2023-17225
Name of the Vulnerable Software and Affected Versions Akbim Computer Panon versions prior to 1.0.2 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations F...
PT-2022-6952 · Unknown · Qms Automotive
Name of the Vulnerable Software and Affected Versions: QMS Automotive versions prior to V12.39 Description: The issue is related to the storage of critical information in plaintext, which could allow a remote attacker to disclose user credentials. This may enable the attacker to gain access to...
PT-2022-8647 · Unknown +1 · Modsecurity +2
Name of the Vulnerable Software and Affected Versions: Modsecurity owasp-modsecurity-crs version 3.2.0 Description: The issue allows attackers to bypass Modsecurity WAF protection using comment characters and variable assignments in SQL syntax, enabling them to implement SQL injection attacks on...
PT-2021-22653 · Unknown · Ipack Scada
Name of the Vulnerable Software and Affected Versions: Ipack SCADA Software versions prior to 1.1.0 Description: The issue is related to improper handling of parameters, allowing Blind SQL Injection. This can potentially be exploited to extract or modify sensitive data from the database...
PT-2021-7654
Name of the Vulnerable Software and Affected Versions SonicWall Secure Remote Access SRA appliances versions 8.x through 9.0.0.9-26sv Description The issue is related to improper neutralization of a SQL command, leading to a SQL injection vulnerability. This vulnerability impacts end-of-life Secu...