PT-2024-17343 · WordPress · The Travel Booking Wordpress Theme

Name of the Vulnerable Software and Affected Versions: The Travel Booking WordPress Theme versions up to, and including, 3.1.6 Description: The issue is a blind time-based SQL Injection vulnerability. It affects the order id parameter due to insufficient escaping on the user-supplied parameter an...

PT-2024-36627 · Unknown · Dr Affiliate

Name of the Vulnerable Software and Affected Versions: Dr Affiliate versions 1.2.3 and earlier Description: The issue is related to an SQL Injection vulnerability, which allows attackers to manipulate SQL commands. This is due to the improper neutralization of special elements used in an SQL...

PT-2024-39346 · Unknown · Saha365 App

Name of the Vulnerable Software and Affected Versions: Saha365 App versions prior to 30.09.2024 Description: The issue is related to the improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem affects the Saha365 App. Recommendations: For versions...

Mobil365 Informatics Saha365 SQL注入漏洞

Mobil365 Informatics Saha365 is an application from Mobil365 Informatics, Inc. Mobil365 Informatics Saha365 suffers from a SQL injection vulnerability that stems from an improper neutralization of a special element...

PT-2024-36639 · Unknown · Serviceonline Service

Name of the Vulnerable Software and Affected Versions: serviceonline Service versions n/a through 1.0.4 Description: The issue is related to an 'SQL Injection' vulnerability, specifically improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This proble...

PT-2024-36624 · Unknown · Etemplates

Name of the Vulnerable Software and Affected Versions: eTemplates versions 0.2.1 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be exploited to inject SQL code, potentially leading t...

The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to user data.

The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...

WordPress plugin Instant Appointment SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

WordPress plugin Mimoos SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network administration allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the Web interface for managing Cisco Secure Firewall Management Center software formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

PT-2024-36628 · Unknown · Site Intel

Name of the Vulnerable Software and Affected Versions: Critical Site Intel versions n/a through 1.0 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for SQL Injection, which can be exploited...

WordPress Service plugin <= 1.0.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Service versions = 1.0.4...

WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin TSB Occasion Editor versions = 1.2.1...

Dell Avamar SQL Injection Vulnerability (CNVD-2025-18249)

Dell Avamar is a data backup and recovery software. A SQL injection vulnerability exists in Dell Avamar. The vulnerability stems from a lack of proper neutralization of specific elements used in SQL commands. An attacker could exploit the vulnerability to execute commands...

Online Class and Exam Scheduling System class_update.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the id parameter of the classupdate.php page. ...

CVE-2024-12484

A vulnerability classified as critical was found in Codezips Technical Discussion Forum 1.0. This vulnerability affects unknown code of the file /signuppost.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

PT-2024-16986 · WordPress · Sql Chart Builder

Name of the Vulnerable Software and Affected Versions: SQL Chart Builder plugin for WordPress versions up to, and including, 2.3.6 Description: The issue arises from insufficient escaping on the user-supplied arg1 parameter and lack of sufficient preparation on the existing SQL query in the gvn...

wetech-cms 注入漏洞

wetech-cms is a content management system by Cheng Jinbao, an individual developer. An injection vulnerability exists in wetech-cms version 1.0 to 1.2, which is prone to SQL injection attacks...

wetech-cms 注入漏洞

wetech-cms is a content management system by Cheng Jinbao, an individual developer. An injection vulnerability exists in wetech-cms version 1.0 to 1.2, which is prone to SQL injection attacks...

WordPress plugin Schema App Structured Data 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...