CVE-2021-24741

CVE-2021-24741 Support Board v 3.3.3의 다중 SQL 인젝션 인증되지 않음 설명 Support Board V 3.3.3 Multiple SQL Injection Vulnerability in Support Board Version 3.3.3 that allow remote unauthenticated attacker to execute arbitrary SQL commands via statuscode, department, userid, conversationid,...

CVE-2024-34222

인사 관리 시스템 1.0 제출자: Kha Do 취약점 SQL 인젝션 설명 SourceCodester 인사 관리 시스템 1.0의 /hrm/country.php에서 발견된 SQL 인젝션 취약점으로, 공격자가 searccountry 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. 영향을 받는 구성 요소 경로 URL: /hrm/country.php 매개변수: & searccountry=inject here 영향 이 취약점으로 인해 공격자는 searccountry 매개변수를 통해 임의의 SQL 명령을 실행할 수 있습니다. P...

CVE-2023-50070

CVE-2023-50070 Customer Support System 1.0 - 複数のSQLインジェクション脆弱性 - saveticket 説明 : Customer Support System 1.0の /customersupport/ajax.php?action=saveticket における複数のSQLインジェクション脆弱性により、認証済みの攻撃者が departmentid、customerid、subject を介して任意のSQLコマンドを実行可能です。 脆弱性のある製品バージョン : Customer Support System 1.0 CVE作成者 :...

TurboMeeting - Boolean-based SQL Injection

A Boolean-based SQL injection vulnerability in the "RHUB TurboMeeting" web application. This vulnerability could allow an attacker to execute arbitrary SQL commands on the database server, potentially allowing them to access sensitive data or compromise the server. id: CVE-2024-38289 info: name:...

Zabbix - SQL Injection

Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggleids array parameter in latest.php and perform SQL injection attacks. id: CVE-2016-10134 info: name: Zabbix - SQL Injection author: princechaddha severity: critical description: Zabbix...

Rocky Linux 8 [CIQ] Security Update: cyrus-sasl / cyrus-sasl-debuginfo / cyrus-sasl-debugsource / etc (crlsa-2022_0658)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20220658 advisory. cyrus-sasl: failure to properly escape SQL input allows an attacker to execute arbitrary SQL commands CVE-2022-24407 Tenable has extracted the preceding description...

CVE-2026-96428

SQL Injection in the /WebAgenda/SMBAjaxAutoComplete.do API endpoint of Flowring Agentflow 4.0 version before 2025/08/08 allows remote attackers to execute arbitrary SQL commands via the words parameter...

CVE-2026-96430 Flowring Agentflow 4.0 - Exposed Dangerous Method or Function

Exposed Dangerous Method or Function in the /WebAgenda/SQLWin.do API endpoint of Flowring Agentflow 4.0 version Before 2026/08/28 allows remote authenticated users to execute arbitrary SQL commands via the sql parameter...

CVE-2024-40443

CVE-2024-40443 CVE-2024-40443 - Computer Laboratory Management System v1.0의 SQL Injection 취약점으로, 공격자가 임의의 SQL 명령을 실행할 수 있습니다...

CVE-2026-86677 Broken Authentication vulnerability

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...

CVE-2026-86677

ZohoCorp ManageEngine Applications Manager (versions 182000 and below) is vulnerable to a Broken Authentication issue caused by the improper neutralization of special elements in an SQL command . This flaw allows a low-privileged user to execute unauthorized SQL commands, which could lead to admi...

EUVD-2026-85295

ZohoCorp ManageEngine Applications Manager versions 182000 and below allowed a low-privileged user to run unauthorized SQL commands, potentially gaining administrator access and remote code execution...

PT-2026-95975

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection flaw exists in the /module/department/index.php endpoint. This issue occurs when the ID argument is manipulated, allowing a remote attacker to execute arbitrary SQL...

CVE-2026-84082

IBM Guardium Data Protection 12.2 is affected by a SQL injection vulnerability (CWE-89) caused by improper neutralization of special elements used in an SQL command. A remote unauthenticated attacker can exploit this to execute arbitrary SQL commands, with full impact on confidentiality, integrit...

CVE-2026-84082 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84073 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84064 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

EUVD-2026-83417

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84073: Improper Neutralization of Special Elements used in an SQL Command

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84082: Improper Neutralization of Special Elements used in an SQL Command

IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...