Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online tours management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from a problem with the prepare function in emailsetup.php, whi...

PHPGurukul Nipah virus Testing Management System SQL Injection Vulnerability

PHPGurukul Nipah Virus Testing Management System is an online virus diagnostic platform from PHPGurukul Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which originates from a SQL injection vulnerability in the file...

The vulnerability of the “search.cgi” file of the License Plate Verifier software allows a violator to execute arbitrary SQL queries.

The vulnerability of the “search.cgi” file of the License Plate Verifier software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary SQL queries...

Zultys MX Series Security Vulnerability

Zultys MX Series is a series of IP phones from Zultys USA. A security vulnerability exists in Zultys MX Series that stems from susceptibility to SQL injection attacks...

The vulnerability of the Tyk application programming interface, related to the lack of security measures for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Tyk cloud firewall’s application programming interface is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PrestaShop SQL注入漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. PrestaShop suffers from a SQL injection vulnerability that stems from the module havi...

CVE-2023-5108

The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin...

VulnCheck KEV: CVE-2023-30625

rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default...

PT-2023-30965 · Unknown · Senayan Library Management Systems (Slims) 9 Bulian

Name of the Vulnerable Software and Affected Versions: Senayan Library Management Systems Slims 9 Bulian version 9.6.1 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the admin/modules/reporting/customs/fines report.php endpoint. Recommendations: For version...

VulnCheck KEV: CVE-2022-0846

The SpeakOut! Email Petitions WordPress plugin before 2.14.15.1 does not sanitise and escape the id parameter before using it in a SQL statement via the dkspeakoutsendmail AJAX action, leading to an SQL Injection exploitable by unauthenticated users...

PT-2023-14616 · Apache · Apache Cocoon

Name of the Vulnerable Software and Affected Versions: Apache Cocoon versions 2.2.0 through 2.2.x before 2.3.0 Apache Cocoon versions prior to 2.3.0 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. Users...

Virtuoso Open-Source Edition Security Vulnerabilities

Virtuoso Open-Source Edition is a high-performance and scalable multi-model RDBMS, data integration middleware, linked data deployment and HTTP application server platform open-sourced by OpenLink Software. A security vulnerability exists in Virtuoso Open-Source Edition version v7.2.11, which ste...

The vulnerability of the Apache Submarine machine learning platform, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Apache Submarine machine learning platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Free and Open Source Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns parameter that can lead to sql injection...

PT-2023-25525

Name of the Vulnerable Software and Affected Versions Medart Notification Panel versions through 20231123 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. The vendor...

CVE-2023-5047 SQLi in DRDrive

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in DRD Fleet Leasing DRDrive allows SQL Injection. This issue affects DRDrive: before 20231006...

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Cross Selling in Modal Cart versions prior to 3.5.0. An attacker...

PrestaShop Chronopost Official Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, short message alerts, and product image zoom, among other features. A security vulnerability exists in PrestaShop Chronopost Official. An attacker can exploit...

The vulnerability of the DELETE_STR script (General/system/censor_words/module/delete.php) in the Tongda OA automation tool allows a hacker to execute arbitrary SQL queries.

The vulnerability of the delete.php script General/system/censorwords/module/delete.php, a tool for automating business processes in Tongda OA, is related to the failure to protect the SQL query structure during the processing of the DELETESTR parameter. Exploiting this vulnerability allows an...

PT-2023-22033 · Unknown · Veon Computer Service Tracking

Name of the Vulnerable Software and Affected Versions: Veon Computer Service Tracking Software versions prior to 2.0 Veon Computer Service Tracking Software versions through 20231122 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special...