Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system by Razormist Personal Developer. A SQL injection vulnerability exists in Simple Membership System version 1.0, which stems from a SQL injection vulnerability in the club parameter club in the file clubvalidator.php...

CVE-2023-4673

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sanalogy Turasistan allows SQL Injection.This issue affects Turasistan: before 20230911...

CF Software Oil Management Software SQL Injection Vulnerability

CF Software Oil Management Software is an oil management software from CF Software. A SQL injection vulnerability exists in versions of CF Software Oil Management Software prior to 20230912, which stems from improper neutralization of special elements...

PT-2023-30790

Name of the Vulnerable Software and Affected Versions Besttem Network Marketing Software versions prior to 1.0.2309.6 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

OpenRefine SQL Injection Vulnerability

OpenRefine is a Java-based open source tool. The product is mainly used for loading data, analyzing data and cleaning data. OpenRefine suffers from a SQL injection vulnerability. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

CVE-2023-4766

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Movus allows SQL Injection.This issue affects Movus: before 20230913...

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v.3.6, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a carefully crafted...

Movus SQL Injection Vulnerability

Movus is a rental car service by Movus, Inc. A SQL injection vulnerability exists in versions prior to Movus 20230913, which stems from the presence of a SQL injection vulnerability...

Vtiger CRM SQL Injection Vulnerability

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version v.7.5.0, which...

PT-2023-30173

Name of the Vulnerable Software and Affected Versions Sanalogy Turasistan versions prior to 20230911 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. There is no...

The vulnerability of the ajax_hosts() and ajax_hosts_noany() functions (graphs.php) of the Cacti network monitoring tool allows a hacker to execute arbitrary SQL queries.

The vulnerability of the ajaxhosts and ajaxhostsnoany functions graphs.php of the Cacti network monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

BlackBerry AtHoc SQL Injection Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a SQL injection vulnerability in the...

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Operating System Command Injection Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. The Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform suffers from an...

Internet Reservation Module Booking Engine Code Issue Vulnerability

Internet Reservation Module Booking Engine is a booking platform. A code issue vulnerability exists in Internet Reservation Module Booking Engine. An attacker could use this vulnerability to upload arbitrary content, such as a web shell component, to a SQL database and execute it with system...

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

PT-2023-25129 · Unknown · Coyav Travel Proagent

Name of the Vulnerable Software and Affected Versions: Coyav Travel Proagent versions before 20230904 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

Mestav Software E-commerce Software SQL Injection Vulnerability

Mestav Software E-commerce Software is an e-commerce software from Mestav Software, Turkey. An SQL injection vulnerability exists in Mestav Software E-commerce Software versions prior to 20230901, which stems from susceptibility to SQL injection attacks...

The vulnerability of the Quick Post Duplicator plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information and execute arbitrary SQL code.

The vulnerability of the Quick Post Duplicator plugin of the WordPress content management system is related to the lack of protection for the SQL query structure when processing the postid parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Cacti SQL Injection Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from an SQL injection vulnerability that stems from regular...