4148 matches found
Farmakom Remote Administration Console SQL Injection Vulnerability
Farmakom Remote Administration Console is a software from Farmakom, Inc. A SQL injection vulnerability exists in Farmakom Remote Administration Console versions prior to 1.02, which stems from incorrect neutralization of special elements used in SQL commands...
PT-2023-26583 · Unknown · Special Interest Group Network For Analysis/Liaison
Name of the Vulnerable Software and Affected Versions: Special Interest Group Network for Analysis and Liaison versions 4.4.0 through 4.7.7 Description: The issue allows authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the...
CVE-2023-34476
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
CVE-2023-34477
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
CVE-2023-34477
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
CVE-2023-23758
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
Sql injection
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability allows SQL Injection...
Joomla! Creative Gallery SQL Injection Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Creative Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...
BA Gallery SQL Injection Vulnerability in Joomla!
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! BA Gallery that stems from improper neutralization of special elements, which can lead to SQL injection...
PT-2023-7552
Name of the Vulnerable Software and Affected Versions OpenCMS affected versions not specified Description The issue in OpenCMS is related to the failure to neutralize special elements. This could allow a remote attacker to impact the confidentiality, integrity, and availability of information...
Joomla! Proforms Basic SQL Injection Vulnerability
Joomla! is a set of forum components used in the Joomla! content management system. A security vulnerability exists in Joomla! Proforms Basic that stems from improper neutralization of special elements, which can lead to SQL injection...
MediaWiki < 1.31.12 Special Contributions Hidden User Leakage
According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.31.12 or 1.32.x prior to 1.35.2. It is, therefore, affected by a vulnerability in Special:Contributions that can leak that hidden users exist. Note that the scanner has not teste...
HikaShop Joomla Component SQL Injection Vulnerability
HikaShop Joomla Component is an e-commerce component from the Hikari team for use in the Joomla content management system. A security vulnerability exists in HikaShop Joomla Component versions 4.4.1 through 4.7.2, which stems from improper neutralization of a special element, resulting in SQL...
CVE-2023-4157 Improper Neutralization of Special Elements in Output Used by a Downstream Component in omeka/omeka-s
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' in GitHub repository omeka/omeka-s prior to version 4.0.3...
VOC++ Business Special Edition Creatiff Original 1.3 Information Disclosure
==================================================================================================================================== | Title : VOC++ Business Special Edition Creatiff Original v1.3 Config Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro /...
LiquidationQueue brings centralization risk in the contract.
Lines of code Vulnerability details Impact the owner has too much unilateral control over liquidations and can manipulate te country in the following ways: The owner of LiquidationQueue sees a profitable liquidation opportunity Before anyone else can liquidate, they use LiquidationQueue to place ...
IBM DB2 Buffer Overflow (7010565) (Windows)
According to it self-reported version number, IBM Db2 is is vulnerable to a is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow the buffer and execute arbitrary code. Note that Nessus has not tested for this issue but has instead relied only on the...
PowerJob Command Execution Vulnerability
PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their applications. A command execution vulnerability exists in PowerJob version 4.3.3, which stems from the parameter instanceId of /instance/detail failing to properl...
IBM DB2 Privilege Escalation (7010571) (Windows)
According to its self-reported version number, IBM Db2 on Windows may be vulnerable to a privilege escalation caused by at least one installed service using an unquoted service path. A local attacker could exploit this vulnerability to gain elevated privileges by inserting an executable file in t...