CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-

CVE-2024-55099-Sistema-Assunzione-Infermiere-Online-v1.0-Vulnerabilità-SQL-Injection Autore dell'exploit: ugurkarakoc Homepage del fornitore https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql Link del software https://phpgurukul.com/?sdmprocessdownload=1&downloadid=17826...

ColorOS-CVE-2025-10184

Quelle Technische Analyse der Schwachstelle und Lösung Schwachstellenbeschreibung Typ: Datenbank-Injektion 1=1 AND Wirkung: Jede App kann SMS-Daten auslesen. Keine Berechtigung erforderlich, keine Benutzerinteraktion, unbemerkter Zugriff Auswirkung: Alle SMS-Nachrichten und SMS-Verifizierungscode...

CVE-2026-24417

CVE-2026-24417: OpenSTAManager presenta una Blind SQL Injection basata sul tempo con Denial of Service amplificato Panoramica Campo| Dettagli ---|--- ID CVE| CVE-2026-24417 Gravità| ALTA Avviso| Visualizza avviso Scoperta da| Lukasz Rybak Prodotti interessati devcode-it/openstamanager versioni:...

CVE-2026-30655

CVE-2026-30655 — Iniezione SQL in esiclivre reimpostazione della password Riepilogo Una vulnerabilità di iniezione SQL esiste nell'endpoint di reimpostazione della password di esiclivre. Un attaccante non autenticato può iniettare SQL tramite il parametro POST cpfcnpj, con il potenziale risultato...

CVE-2025-11177

Trigger the SQLi with a time-based payload in the public login curl -w '\nTIME:%timetotal\n' -s \ -d 'log=anything%27%3B%20SELECT%20pgsleep5%3B%20--&pwd=irrelevant&wp-submit=Log+In' \ -d 'redirectto=' \ -d 'testcookie=1' \ 'http://target/wp-login.php'...

CVE-2026-25513

CVE-2026-25513: FacturaScripts ha un'SQL Injection nella clausola ORDER BY dell'API Panoramica Campo| Dettagli ---|--- ID CVE| CVE-2026-25513 Gravità| ALTA Advisory| Visualizza Advisory Scoperto da| Lukasz Rybak Prodotti Interessati facturascripts/facturascripts versioni: 2025.81 Classificazione...

CVE-2026-84209

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-80381

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-81932

IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to SQL injection. A remote unauthenticated attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database...

CVE-2025-71428

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2025-71428

Versions of Jivejdon through 5.0 are vulnerable to a SQL injection flaw in the AccountDaoSql.getAccountByNameLike() method. Authenticated users with the Admin role can exploit this by submitting crafted input to the /admin/user/userListAction endpoint via the username parameter . Successful explo...

CVE-2025-71428 Jivejdon through 5.0 SQL Injection via username in userListAction

Jivejdon through 5.0 contains a sql injection vulnerability in AccountDaoSql.getAccountByNameLike that allows authenticated administrators to inject SQL via the username parameter. Attackers with the Admin role can submit crafted input to /admin/user/userListAction to read database contents,...

CVE-2026-80381 Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute unauthorized SQL statements due to SQL injection...

CVE-2026-80381

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a SQL injection flaw within the Sniffer component . This vulnerability (CWE-89) could allow a remote attacker to execute unauthorized SQL statements . To remediate this, IBM strongly recommends applying the latest Sniffe...

CVE-2026-81932

IBM Guardium Data Protection versions 12.0 , 12.1 , and 12.2 are vulnerable to an SQL injection (CWE-89) within the Sniffer component . A remote unauthenticated attacker could send specially crafted SQL statements to view, add, modify, or delete information in the back-end database. To remediate ...

CVE-2026-84209 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to execute arbitrary SQL commands due to improper neutralization of special elements used in an SQL command...

CVE-2026-84209

IBM Guardium Data Protection versions 12.2.2 and 12.1 are susceptible to an SQL Injection vulnerability (CWE-89). A remote attacker can execute arbitrary SQL commands due to the improper neutralization of special elements used in an SQL command. The vulnerability has a HIGH base severity score of...

CVE-2026-16830

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attacker to modify data and cause a denial of service due to an SQL injection vulnerability...

CVE-2026-24416

CVE-2026-24416: OpenSTAManager presenta una SQL Injection Blind Basata sul Tempo nel Modulo Prezzi Articoli Panoramica Campo| Dettagli ---|--- ID CVE| CVE-2026-24416 Gravità| ALTA Avviso| Visualizza Avviso Scoperto da| Lukasz Rybak Prodotti Interessati devcode-it/openstamanager versioni: = 2.9.8...