22 matches found
CVE-2022-23510
cube-js is a headless business intelligence platform. In version 0.31.23 all authenticated Cube clients could bypass SQL row-level security and run arbitrary SQL via the newly introduced /v1/sql-runner endpoint. This issue has been resolved in version 0.31.24. Users are advised to either upgrade ...
EUVD-2011-1350
Malware in sbrugna...
EUVD-2019-7250
Malware in sbrugna...
EUVD-2020-4279
Malware in sbrugna...
EUVD-2008-5244
Malware in sbrugna...
EUVD-2018-17757
Malware in sbrugna...
EUVD-2010-4765
Malware in sbrugna...
EUVD-2019-3487
Malware in sbrugna...
EUVD-2009-5057
Malware in sbrugna...
EUVD-2017-5656
Malware in sbrugna...
EUVD-2012-1683
Malware in sbrugna...
EUVD-2024-40627
Malicious code in bioql PyPI...
EUVD-2022-44609
Malicious code in bioql PyPI...
EUVD-2023-33669
Malicious code in bioql PyPI...
PT-2025-22843 · Unknown · Scriptandtools Real-Estate-Website-In-Php
Name of the Vulnerable Software and Affected Versions: ScriptAndTools Real-Estate-website-in-PHP version 1.0 Description: A critical vulnerability was found in the Admin Login Panel of the ScriptAndTools Real-Estate-website-in-PHP. The manipulation of the Password argument leads to SQL injection...
CVE-2025-31561
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CodeSolz Ultimate Push Notifications ultimate-push-notifications allows SQL Injection.This issue affects Ultimate Push Notifications: from n/a through = 1.2.0...
SQL Injection
decidimawesome-module is vulnerable to SQL Injection. The vulnerability is due to improper neutralization of special elements in SQL commands within the papertrail/version model, allowing an authenticated admin user to manipulate SQL queries to disclose information, read/write files, or execute...
CVE-2022-44820
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/managetransaction&id=...
Joomla! and Mambo Datsogallery 1.3.1 Component - 'id' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28361/info The Datsogallery component for Joomla! and Mambo is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
Support Incident Tracker (SiT!) 3.63 p1 - report_marketing.php?exc[] SQL Injection
Support Incident Tracker SiT! 3.63 p1 - reportmarketing.php?exc SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in ...