CVE-2016-15051

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

EsafeNet CDG 注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. An injection vulnerability exists in EsafeNet CDG version 5.6.3.154.205, which originates from improper handling of the startDate/endDate parameter in the /CDGServer3/logManagement/ClientSortLog.jsp file, resulting in SQL...

CVE-2022-4889: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in visegripped Stracker. Affected by this vulnerability is the function getHistory of the file docroot/publichtml/stracker/api.php. The manipulation of the argument symbol/startDate/endDate leads to sql injection. The identifier of the patch is...