The vulnerability of the PHP PEAR class library lies in the insufficient elimination of special elements in queries, allowing attackers to compromise data integrity.

The vulnerability of the PHP PEAR class library is related to insufficient elimination of special elements in the request. Exploiting this vulnerability can allow an attacker to compromise data integrity...

CVE-2023-1050

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection. This issue affects Web Report System: before 23.03.10...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in As Koc Energy Web Report System allows SQL Injection.This issue affects Web Report System: before 23.03.10...

The vulnerability of FortiWeb web application command-line interpreter and FortiRecorder video surveillance system devices allows attackers to gain unauthorized access to protected information.

The vulnerability of the command-line interpreter of FortiWeb web applications and FortiRecorder video surveillance devices relates to improper filtering of one or more special elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using...

The vulnerability of the Central Management Console (CMC) of the SAP Business Objects Business Intelligence Platform allows a perpetrator to execute arbitrary code and gain unauthorized access to protected information.

The vulnerability of the Central Management Console CMC of the SAP Business Objects Business Intelligence Platform relates to incorrect elimination of special elements in output data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and gain unauthorized access to...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saysis Starcities allows SQL Injection.This issue affects Starcities: through 1.3...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03...

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. This allows attackers to execute arbitrary commands.

The vulnerability in the web interface for operating systems ArubaOS exists due to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of Huawei BiSheng-WNM printer’s microprogramming software lies in the lack of measures to neutralize the special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of Huawei BiSheng-WNM printer’s microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by transmitting specially...

BTCPay Server 安全漏洞

BTCPay Server is a self-hosted open source cryptocurrency payment processor. It is secure, private, uncensored and free. A security vulnerability exists in BTCPay Server versions prior to 1.8.0, which stems from improper neutralization of special elements...

Duplicate advisory: Sequelize vulnerable to Improper Filtering of Special Elements

Duplicate advisory This advisory has been withdrawn because it is a duplicate of GHSA-f598-mfpv-gmfx. This link is maintained to preserve external references. Original Description Due to improper attribute filtering in the sequelize js library, an attacker can peform SQL injections. This issue ca...

FortiWAN - Command injection vulnerability

An improper neutralization of special elements used in an OS command vulnerability CWE-78 in the management interface of FortiWAN may allow an authenticated attacker to execute unauthorized commands via specifically crafted arguments to existing commands...

CVE-2023-22643

An Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPOALIAS, REPOTYPE or...

The vulnerability of the Cisco IOx software platform arises from the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands on the operating system with root privileges.

The vulnerability of the Cisco IOx software platform exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands in the operating system with root privileges...

Honeywell Experion PKS and ACE Controllers Improper Neutralization of Special Elements in Output Used By a Downstream Component (CVE-2021-38395)

Honeywell Experion PKS C200, C200E, C300, and ACE controllers are vulnerable to improper neutralization of special elements in output, which may allow an attacker to remotely execute arbitrary code and cause a denial-of-service condition. This plugin only works with Tenable.ot. Please visit...

Improper Neutralization of Equivalent Special Elements

Overview Affected versions of this package are vulnerable to Improper Neutralization of Equivalent Special Elements due to a possible HTML injection via deleting an account's API key that has a payload as its label. Remediation Upgrade BTCPayServer.Client to version 1.7.5 or higher. References -...

The vulnerability of the implementation of the remote_agent.php script in the network monitoring software Cacti allows a perpetrator to execute arbitrary commands.

The vulnerability of the remoteagent.php script implementation of the Cacti network monitoring software is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

radare2 injection vulnerability

radare2 is a set of libraries and tools for working with binaries. radare2 versions prior to 5.8.2 have a security vulnerability that stems from the inability to clean up special elements to a different plane and the presence of special element injection. No detailed vulnerability details are...

CVE-2022-4721 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

Failure to Sanitize Special Elements into a Different Plane Special Element Injection in GitHub repository ikus060/rdiffweb prior to 2.5.5...

Fortinet FortiADC SQL Injection Vulnerability (CNVD-2023-02484)

Fortinet FortiADC is an application delivery controller from Fortinet, Inc. Fortinet FortiADC is vulnerable to SQL injection, which stems from the use of special elements that are not neutralized and can be exploited by an attacker to execute unauthorized code or send commands via specially craft...