TAI Smart Factory QPLANT SF SQL Injection Vulnerability

TAI Smart Factory QPLANT SF is a tool for managing and controlling production execution from TAI Smart Factory, Inc. A SQL injection vulnerability exists in TAI Smart Factory QPLANT SF version 1.0, which originates from allowing a remote attacker to retrieve all database information by sending a...

NewType FlowMaster BPM Plus has a SQL injection vulnerability

NewType FlowMaster BPM Plus is a business process management system from NewType, a Chinese company. A SQL injection vulnerability exists in NewType FlowMaster BPM Plus, which arises from a specific query function that does not properly restrict user input, allowing a remote attacker with regular...

PT-2024-39978 · Formosasoft · Ee-Class

Name of the Vulnerable Software and Affected Versions: FormosaSoft ee-class affected versions not specified Description: The issue concerns a failure to properly validate a specific page parameter in the ee-class from FormosaSoft, allowing remote attackers with regular privileges to inject...

PT-2024-38074 · Netease Youdao · Qanything

Name of the Vulnerable Software and Affected Versions: netease-youdao/qanything version 1.4.1 Description: The issue concerns a SQL injection vulnerability where unsafe data obtained from user input is concatenated in SQL queries. This affects functions including get knowledge base name, from...

WordPress plugin Tainacan has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

Microsoft Configuration Manager SQL Injection

The vulnerability of Microsoft Configuration Manager software for managing IT infrastructure is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

LyLme Spage SQL injection vulnerability

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

Online Eyewear Shop SQL Injection Vulnerability

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0, which originates in the file /classes/Master.php?f=deleteproduct where the parameter id of the function deleteproduct can lead to SQL...

LyLme Spage SQL injection vulnerability

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

LyLme Spage SQL injection vulnerability

LyLme Spage six zero navigation page is China six zero LyLme open source a navigation page . Dedicated to simple and efficient advertising-free Internet navigation and search portal , support for background links , custom search engine , precipitation of the most valuable links , no commercial...

PT-2024-39844 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue was found in the code-projects Blood Bank System, affecting an unknown function of the file register.php. The manipulation of the user argument leads to SQL injection. ...

Cavok SQL injection vulnerability

Cavok is an application from Cavok, Inc. Cavok suffers from a SQL injection vulnerability that stems from improper neutralization of special elements...

EsafeNet CDG SQL Injection Vulnerability

EsafeNet CDG is a document security management system from EsafeNet. EsafeNet CDG V5 version exists SQL injection vulnerability, the vulnerability stems from the parameter id of the file /CDGServer3/document/Catelogs;logindojojs?command=DelCatelogs will lead to SQL injection...

CADClick security vulnerability

CADClick is a software solution from CADClick, Inc. that creates interactive catalogs of 2D/3D CAD data for individual customer CAD catalogs. A security vulnerability exists in CADClick v1.11.0 and earlier versions that stems from the presence of a SQL injection vulnerability that allows remote...

SonarSource SonarQube security vulnerabilities

SonarSource SonarQube is an open source code quality management system from SonarSource, Switzerland. A security vulnerability exists in SonarSource SonarQube version 10.4 up to and including 10.6. An attacker can exploit the vulnerability to inject blind SQL commands...

Codezips Online Shopping Portal SQL Injection Vulnerability

Codezips Online Shopping Portal is a Codezips open source online store system. A SQL injection vulnerability exists in Codezips Online Shopping Portal version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql injection...

Zoho ManageEngine Password Manager Pro Privilege Escalation

The vulnerability of the Zoho ManageEngine Password Manager Pro and the ManageEngine Privileged Access Manager 360 PAM360 software solutions lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability could allow a...

Campcodes House Rental System SQL Injection

The vulnerability of the web application for managing rental housing, Campcodes House Rental System, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

PowerPanel Enterprise MCUDBHelper Query Function Disclosure

The vulnerability of the queryptasklean function in the MCUDBHelper component of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker to disclose...

EsafeNet CDG security vulnerability

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG version V5, which is caused by a SQL injection vulnerability in the id parameter of the NavigationAjax interface...