19 matches found
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
CVE-2026-51077: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
CVE-2026-51077
SQL injection vulnerability in Dede CMS v.5.7.118 allows a remote attacker to obtain sensitive information via the sqlquery parameter of the syssqlquery.php component...
EUVD-2022-47071
Malicious code in bioql PyPI...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-3839
A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin/syssqlquery.php. The manipulation of the argument sqlquery leads to sql injection. The attack may be launched remotely. The complexity of...
CVE-2023-3837
A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2023-3837: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/syssqlquery.php. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be use...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 is affected by an SQL injection vulnerability via the component /dede/sys_sql_query.php. The CVE-2023-27733 entry (NVD/CVE listing) assigns a CVSS v3.1 base score of 7.2 (HIGH), with NETWORK attack vector, LOW attack complexity, and HIGH privileges required, and impact on confide...
CVE-2023-27733: Improper Neutralization of Special Elements used in an SQL Command
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
CVE-2023-27733
DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...
Sql injection
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
CVE-2022-44120
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
CVE-2022-44120
CVE-2022-44120 affects Dedecmdv6 (DedeCMS) v6.1.9. The vulnerability is an SQL Injection in the sys_sql_query.php component. This yields potential high-impact outcomes per CVSS data (CRITICAL, Confidentiality/Integrity/Availability HIGH). The connected sources confirm the affected software/file b...
CVE-2022-44120
dedecmdv6 6.1.9 is vulnerable to SQL Injection. via syssqlquery.php...
