Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

Online Car Wash Booking System SQL注入漏洞（CNVD-2022-53345）

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=bookings /viewdetails&id=page lacks validation of external input SQL...

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

CVE-2022-31768

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

Denial Of Service (DoS)

mariaDB is vulnerable to denial of service. The vulnerability exists due to an issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin allowing an attackers to crash the system via specially crafted SQL statements...

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version 2.3.2 is vulnerable to a SQL injection vulnerability that originates in /ordering/index.php?q=products&id=The page lacks validation for external input SQL statements, whic...

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45901)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in Createtmptable::finalize which allows an attacker to crash the application via specially malicious SQL statements...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component Itemfuncin::cleanup which allows an attacker to exploit this via specially crafted SQL statements causing a crash of the system...

Use After Free

MariaDB is vulnerable to Use After Free. The vulnerability exists due to a memory corruption via the component Itemargs::walkarg, allowing an attacker to exploit the vulnerability via specially crafted SQL statements...

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component mystrcasecmp8bit which allows an attacker to cause a crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in the component 1Field::setdefault1 which allows an attacker to cause an application crash via specially crafted SQL statements...

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An issue in the component mydecimal::operator allows remote attackers to cause a denial of service via specially crafted SQL statements...

Buffer Overflow

mariadb is vulnerable to buffer overflow. The vulnerability exists due to decimalbinsize which allows an attacker to cause a crash via specially crafted SQL statements...

ChatBot Application with a Suggestion Feature SQL Injection Vulnerability

ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple chatbot/classes/Master.php?f=deleteresponse, id is missing validation for external input SQL...

EulerOS 2.0 SP3 : mariadb (EulerOS-SA-2022-1746)

According to the versions of the mariadb packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - MariaDB through 10.5.9 allows an application crash in findfieldintables and findorderinlist via an unused common table expression CTE...

Use-After-Free

mariadb is vulnerable to Use-After-Free. The vulnerability exists in Binarystring::freebuffer of sqlstring.h which allows an attacker to cause a crash via specially crafted SQL statements...

GHSA-7FF4-CV53-4CJQ phpMyAdmin SQL injection vulnerability

An issue was discovered in SearchController in phpMyAdmin before 4.9.6 and 5.x before 5.0.3. A SQL injection vulnerability was discovered in how phpMyAdmin processes SQL statements in the search feature. An attacker could use this flaw to inject malicious SQL in to a query...

CVE-2022-22495

IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941...

FreeBSD : MariaDB -- Multiple vulnerabilities (04fecc47-dad2-11ec-8fbd-d4c9ef517024)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 04fecc47-dad2-11ec-8fbd-d4c9ef517024 advisory. The MariaDB project reports: MariaDB fixed 23 vulnerabilities across all supported versions...