13603 matches found
CVE-2023-50070
CVE-2023-50070 Customer Support System 1.0 - Múltiples vulnerabilidades de inyección SQL - saveticket Descripción : Múltiples vulnerabilidades de inyección SQL en /customersupport/ajax.php?action=saveticket en Customer Support System 1.0 permiten a atacantes autenticados ejecutar comandos SQL...
CVE-2021-24741
CVE-2021-24741 Múltiples Inyecciones SQL Sin autenticación en Support Board v 3.3.3 Descripción root@kitploit: Support Board V 3.3.3 Múltiples vulnerabilidades de Inyección SQL en Support Board Versión 3.3.3 que permiten a un atacante remoto no autenticado ejecutar comandos SQL arbitrarios a trav...
TurboMeeting - Boolean-based SQL Injection
A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...
Zabbix - SQL Injection
Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...
EUVD-2026-85295
ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...
CVE-2026-86677
ZohoCorp ManageEngine Applications Manager (versions 182000 and below) is vulnerable to a Broken Authentication issue caused by the improper neutralization of special elements in an SQL command . This flaw allows a low-privileged user to execute unauthorized SQL commands, which could lead to admi...
CVE-2024-40443
CVE-2024-40443 CVE-2024-40443 - Una vulnerabilidad de inyección SQL en Computer Laboratory Management System v1.0 permite a los atacantes ejecutar comandos SQL arbitrarios...
CVE-2024-34222
Sistema de Gestión de Recursos Humanos 1.0 Presentado por: Kha Do Vulnerabilidad Inyección SQL Descripción La vulnerabilidad de inyección SQL en /hrm/country.php en SourceCodester Human Resource Management System 1.0 permite a los atacantes ejecutar comandos SQL arbitrarios a través del parámetro...
CVE-2026-84082
IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...
CVE-2026-84082 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
EUVD-2026-83417
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84064 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84073: Improper Neutralization of Special Elements used in an SQL Command
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command
IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...
VulnCheck KEV: CVE-2017-8917
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2026-37009
A SQL injection vulnerability in NL2SQLTool in crewai-tools v1.10.2rc1 allows a remote attacker to execute arbitrary SQL commands via an unsanitized sqlquery argument...
CVE-2026-34191
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Portable Runtime Utility via aprdbdoracle provider. This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3...
