3 matches found
CVE-2025-41678
A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...
CVE-2024-57621
An issue in the GDKanalyticalcorrelation component of MonetDB Server v11.47.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2024-32480
LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Versions prior to 24.4.0 are vulnerable to SQL injection. The order parameter is obtained from $request. After performing a string check, the value is directly incorporated into an SQL statement and concatenated, resultin...