19 matches found
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
CVE-2026-51077: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
EUVD-2022-47071
Malicious code in bioql PyPI...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-3839
A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...
CVE-2023-3837
A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2023-3837: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733: Improper Neutralization of Special Elements used in an SQL Command
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 is affected by an SQL injection vulnerability via the component /dede/sys_sql_query.php. The CVE-2023-27733 entry (NVD/CVE listing) assigns a CVSS v3.1 base score of 7.2 (HIGH), with NETWORK attack vector, LOW attack complexity, and HIGH privileges required, and impact on confide...
Sql injection
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
CVE-2022-44120
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
CVE-2022-44120: Improper Neutralization of Special Elements used in an SQL Command
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
CVE-2022-44120
CVE-2022-44120 affects Dedecmdv6 (DedeCMS) v6.1.9. The vulnerability is an SQL Injection in the sys_sql_query.php component. This yields potential high-impact outcomes per CVSS data (CRITICAL, Confidentiality/Integrity/Availability HIGH). The connected sources confirm the affected software/file b...
