287961 matches found
CVE-2026-55239 Tianji: SQL Injection via unsanitized timezone parameter in analytics queries
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql by interpolating the timezone request value without parameter binding. The timezone value can reach...
CVE-2026-55239
The Tianji open source analytics and monitoring platform is vulnerable to SQL Injection in versions prior to 1.31.29 . The root cause is located in the getDateQuery() function within src/server/utils/prisma.ts, which uses Prisma.sql() to construct raw SQL by interpolating the timezone value witho...
CVE-2026-55239
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql by interpolating the timezone request value without parameter binding. The timezone value can reach...
CVE-2026-55239 Tianji: SQL Injection via unsanitized timezone parameter in analytics queries
Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql by interpolating the timezone request value without parameter binding. The timezone value can reach...
WordPress WP Booking System plugin <= 2.1.0.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter vulnerability
Authenticated Administrator+ SQL Injection via 'orderby' Parameter vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin WP Booking System versions = 2.1.0.1...
Exploit for Interpretation Conflict in Wordpress
wp2shell-PoC ⚠ This tool is created solely for educatio...
WordPress Backuply plugin <= 1.5.8 - Authenticated (Subscriber+) Second-Order SQL Injection via Restore to Privilege Escalation vulnerability
Authenticated Subscriber+ Second-Order SQL Injection via Restore to Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Backuply – Backup, Restore, Migrate and Clone versions = 1.5.8...
WordPress Vitepos – Point of Sale (POS) for WooCommerce plugin <= 3.6.1 - Authenticated (Vendor+) SQL Injection vulnerability
Authenticated Vendor+ SQL Injection vulnerability discovered by John Ryan Albon in WordPress Plugin Vitepos versions = 3.6.1...
owasp-top10-exploitation
Manual Validation with Burp Suite Automated scanners SAST, D...
Apache Kylin authorization issue vulnerability
A security vulnerability exists in Apache Kylin versions 5 through 5.0.4. This vulnerability stems from the lack of authentication in the backend cache API, making it susceptible to SQL injection attacks that could lead to the execution of malicious SQL statements...
Kuafuai Aipexbase has a SQL injection vulnerability
The Kuafuai Aipexbase 690adb9 and previous versions have a SQL injection vulnerability. This vulnerability stems from the orderby and groupby fields in the/api/data/invoke endpoint. Attackers can exploit this vulnerability to bypass the SqlGuard blacklist and row-level security by using subquerie...
WordPress Vitepos SQL Injection Vulnerability
WordPress Vitepos 3.5.1 and earlier versions have a SQL injection vulnerability. This vulnerability stems from insufficient cleaning and escaping of the srcby parameter, as well as inadequate preparation of existing SQL queries. This could allow unauthenticated attackers to append additional SQL...
WordPress Booking System SQL Injection Vulnerability
The WordPress Booking System 2.1.0.1 and earlier versions have a SQL injection vulnerability. This vulnerability stems from insufficient escaping of the parameter dataorderby and inadequate preparation of existing SQL queries. It is possible for authenticated attackers with administrator or highe...
MariaDB Server SQL injection vulnerability
MariaDB Server versions prior to 10.6.1 and 10.6.28, 10.11.1 and 10.11.19, 11.4.1 and 11.4.13, 11.8.1 and 11.8.9, 12.3.1 and 12.3.3, and 13.0.1 and 13.0.2 have a SQL injection vulnerability. This vulnerability arises from the fact that functions such as SHOW CREATE SERVER, SHOW CREATE USER, and...
izhaorui Zr.Admin.NET SQL Injection Vulnerability
Zr.Admin.NET versions 3.8.2 and earlier have a SQL injection vulnerability. This vulnerability stems from the use of the GET /system/user/list endpoint to pass a specially crafted PagerInfo.Sort query parameter to the shared ToPage pagination helper function. Attackers can exploit this...
Helicalinsight SQL injection vulnerability
Helicalinsight versions 7.0.0 and earlier have a SQL injection vulnerability. This vulnerability arises from report parameter values sent to /executeDatasource that are not properly escaped. Attackers can use custom Numeric or String placeholder values to bypass the ineffective SqlDetect...
TSG Profleet SQL Injection Vulnerability
Versions of TSG Profleet prior to 16/10/2026 contained an SQL injection vulnerability. This vulnerability stemmed from incorrect handling of the Identificación parameter in the /cgi-bin/index.php file. It could allow SQL injections, and attackers could use GET requests to retrieve, create, update...
WordPress MapSVG SQL Injection Vulnerability
WordPress MapSVG versions 8.16.1 and earlier have a SQL injection vulnerability. This vulnerability arises due to improper handling of special elements in SQL commands, which may lead to SQL injections...
WordPress SQL Chart Builder has a cross-site scripting vulnerability
WordPress SQL Chart Builder 3.0.6 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping, allowing authenticated attackers with privileges of subscriber or higher to inject arbitrary web scripts. This...
Tatsh bincookie SQL injection vulnerability
Versions of Tatsh Bincookie prior to 7.6.3 have a SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands, which may lead to blind SQL injections...