Lucene search
+L

6 matches found

OSV
OSV
•added 2026/04/16 8:53 p.m.•19 views

CVE-2026-40900 DataEase has SQL Injection via Stacked Queries

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /de2api/datasetData/previewSql endpoint. The user-supplied SQL is wrapped in a subquery without validation that the input is a single SELECT statement...

8.7CVSS6.2AI score
SaveExploits0References4
NVD
NVD
•added 2022/10/31 9:15 p.m.•54 views

CVE-2022-3059

The application was vulnerable to multiple instances of SQL injection authenticated and unauthenticated through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL...

8.6CVSS0.0051EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/31 9:15 p.m.•42 views

Sql injection

The application was vulnerable to multiple instances of SQL injection authenticated and unauthenticated through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL...

5CVSS7.9AI score0.0051EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/10/31 8:06 p.m.•44 views

CVE-2022-3059 SQL injection in Schoolbox version 21.0.2, by Schoolbox Pty Ltd

The application was vulnerable to multiple instances of SQL injection authenticated and unauthenticated through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL...

8.6CVSS9.2AI score0.0051EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•4 views

CVE-2022-3059: Improper Neutralization of Special Elements used in an SQL Command

The application was vulnerable to multiple instances of SQL injection authenticated and unauthenticated through a vulnerable parameter. Due to the stacked query support, complex SQL commands could be crafted and injected into the vulnerable parameter and using a sleep based inferential SQL...

8.6CVSS7.2AI score0.0051EPSS
SaveExploits0References3
zdt
zdt
•added 2014/07/08 12:00 a.m.•46 views

Lime Survey 2.05+ Build 140618 XSS / SQL Injection Vulnerabilities

Lime Survey version 2.05+ Build 140618 suffers from cross site scripting and remote SQL injection vulnerabilities. Title: Lime Survey Multiple Vulnerabilities Discovery date: 02/07/2014 Release date: 03/07/2014 Vendor Homepage: www.limesurvey.org Version: Lime Survey 2.05+ Build 140618 Tested wit...

7.9AI score
SaveExploits0
Rows per page
Query Builder