Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Utarit Information Technologies Persolus allows SQL Injection. This issue affects Persolus: before 2.03.93...

CVE-2023-1251

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03...

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.03...

Debian: Security Advisory (DLA-152)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-45962: Improper Neutralization of Special Elements used in an SQL Command

Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php...

CVE-2022-4557

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01...

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

PT-2023-18430

Name of the Vulnerable Software and Affected Versions CONPROSYS HMI System CHS versions 3.5.0 and earlier Description The issue allows a remote authenticated attacker to execute an arbitrary SQL command, potentially obtaining information stored in the database. Recommendations For CONPROSYS HMI...

CVE-2022-41142: Improper Neutralization of Special Elements used in an SQL Command

This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to configure poller resources. The issue results from the lack of proper...

CVE-2022-43437

The Download function’s parameter of EasyTest has insufficient validation for user input. A remote attacker authenticated as a general user can inject arbitrary SQL command to access, modify or delete database...

AeroCMS SQL Injection Vulnerability (CNVD-2023-00001)

AeroCMS is a content management system from the American company AeroCMS. AeroCMS version v0.0.1 suffers from a SQL injection vulnerability that stems from the vulnerability of the Approve parameter of the CMS system to SQL injection attacks. An attacker can exploit this vulnerability by insertin...

CVE-2022-46119: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=categories&c=...

CVE-2022-44296: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manageremark.php?id=...

CVE-2022-44414: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manageservice.php?id=...

CVE-2022-42497: Improper Neutralization of Special Elements used in an SQL Command

Arbitrary Code Execution vulnerability in Api2Cart Bridge Connector plugin = 1.1.0 on WordPress...

CVE-2022-44820: Improper Neutralization of Special Elements used in an SQL Command

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/managetransaction&id=...

CVE-2022-43279: Improper Neutralization of Special Elements used in an SQL Command

LimeSurvey before v5.0.4 was discovered to contain a SQL injection vulnerability via the component /application/views/themeOptions/update.php...

CVE-2022-43086: Improper Neutralization of Special Elements used in an SQL Command

Restaurant POS System v1.0 was discovered to contain a SQL injection vulnerability via updatecustomer.php...

CVE-2022-37202: Improper Neutralization of Special Elements used in an SQL Command

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list...

CVE-2022-39056 Changing Information Technology Inc. RAVA certificate validation system - SQL Injection

RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, modify and delete database...