PT-2026-45845

Name of the Vulnerable Software and Affected Versions ARMember Premium versions prior to 7.3.2 Description An SQL Injection issue exists in the ARMember Premium plugin for WordPress. The get private content data AJAX action fails to properly sanitize the sSortDir 0 parameter, which is concatenate...

PT-2020-10330

Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.4 Description The issue allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, due to the direct insertion of values from the sSortDir 0...

PT-2019-15932

Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.3 Description The issue allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database. This is achieved by directly inserting values from the...

PT-2017-15027

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue concerns SQL Injection via the sSortDir 0 parameter in the List Users API, specifically affecting the /admin/user list backend.php endpoint. This allows an attacker to potentially gain access to the...

PT-2014-5490

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.20 Description The issue allows remote attackers to execute arbitrary SQL commands via several parameters, including the login parameter in send pw by email or generate new password actions, iDisplayStart and...