The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of measures to neutralize special elements used within the operating system, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...

CVE-2025-49854

CVE-2025-49854 describes an SQL Injection in WordPress Slim SEO (versions n/a through 4.5.4) due to improper neutralization of input in SQL commands. Public sources (NVD, CVE List, Patchstack entry) confirm the vulnerability exists in Slim SEO and has a patch/update path: upgrading to a version l...

The vulnerability of Dell Storage Manager’s cluster management software lies in its failure to eliminate special elements used in the operating system command. This allows a hacker to execute arbitrary code.

The vulnerability of Dell Storage Manager’s cluster management software lies in the lack of measures taken to neutralize special elements used in the operating system command set. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands or cause malfunctions in the device.

The vulnerability of the microprogramming software of the TBK DVR4104 and TBK DVR4216 devices lies in the lack of measures to neutralize special elements used in the operating system’s processing of parameters mdb and mdc in the /device.rsp?opt=sys&cmd=SOSTREAMAX command. Exploiting this...

The vulnerabilities of the web servers OZW672 and OZW772, related to the failure to take measures to neutralize special elements, allow attackers to execute arbitrary code.

The vulnerability of web servers OZW672 and OZW772 is related to the failure to take measures to neutralize special elements used in the command when processing the exportDiagramPage parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root privileges...

The vulnerability of the Jinja HTML templating compiler lies in its failure to properly eliminate special elements during template creation. This allows attackers to trigger a service failure.

The vulnerability of the Jinja HTML template compiler relates to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of sub_42581C in the microprogrammed Wi-Fi router software of Tenda AX12 allows a hacker to execute arbitrary commands.

The vulnerability of sub42581C in Tenda AX12 Wi-Fi routers exists due to the lack of measures taken to neutralize special elements used in the operating system’s processing of the staticIp parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-38700

Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in realmag777 WPCS allows Code Injection.This issue affects WPCS: from n/a through 1.2.0.3...

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

CVE-2023-38044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-34477

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23757

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23758

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...

CVE-2023-23991

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WPdevelop / Oplugins Booking Calendar allows SQL Injection.This issue affects Booking Calendar: from n/a through 9.4.3...

The vulnerability of the Telnet component of the Tenda AC9 microprogramming router allows a hacker to execute arbitrary commands.

The vulnerability of the Telnet component in the Tenda AC9 microprogramming system software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

PT-2025-22759 · Unknown · Facturante

Name of the Vulnerable Software and Affected Versions: Facturante versions n/a through 1.11 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

The vulnerability of the NTPSyncWithHost() function in Totolink’s microprogrammed router software allows a hacker to execute arbitrary code.

The vulnerability of the NTPSyncWithHost function in Totolink router microprogramming software is related to the failure to take measures to neutralize special elements of the hostTime parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the data processing application Dell Unisphere for PowerMax arises from the lack of measures to neutralize special elements in the LDAP request, allowing an attacker to execute arbitrary code.

The vulnerability of the Dell Unisphere for PowerMax data processing application is related to the failure to take measures to neutralize special elements in the LDAP request. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-39386

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla Hospital Management System hospital-management allows SQL Injection.This issue affects Hospital Management System: from n/a through = 47.020-11-2023...

The vulnerability of the AngularJS JavaScript framework for developing single-page applications relates to incomplete filtering of special elements, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the AngularJS JavaScript framework for developing single-page applications is related to incomplete filtering of special elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...