GHSA-49JP-CGHC-P5PJ JeecgBoot server-side template injection

SSTI injection vulnerability in jeecg-boot version 3.5.3, allows remote attackers to execute arbitrary code via crafted HTTP request to the /jmreport/loadTableData component...

PT-2023-27969 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: jeecg-boot version 3.5.3 Description: The issue is an SSTI injection vulnerability that allows remote attackers to execute arbitrary code via a crafted HTTP request to the "/jmreport/loadTableData" component. This enables attackers to...

SUSE CVE-2009-0500

Cross-site scripting XSS vulnerability in course/lib.php in Moodle 1.6 before 1.6.9, 1.7 before 1.7.7, 1.8 before 1.8.8, and 1.9 before 1.9.4 allows remote attackers to inject arbitrary web script or HTML via crafted log table information that is not properly handled when it is displayed in a log...

Jeecg-boot SQL注入漏洞

Jeecg-Boot is a code generator-based low-code platform from the JeecgBoot community. A security vulnerability exists in Jeecg-boot v3.4.4, which stems from Jeecg-boot v3.4.4 was found to contain a SQL injection vulnerability via component /sys/dict/queryTableData...

PT-2023-15172 · Unknown · Jeecg-Boot

Name of the Vulnerable Software and Affected Versions: Jeecg-boot version 3.4.4 Description: A SQL injection issue was found in the component /sys/dict/queryTableData. This allows for potential exploitation. A patch was released to address this issue. Recommendations: For Jeecg-boot version 3.4.4...

Security Bulletin: Unauthorized Access to Table Vulnerability in DB2 (CVE-2012-0709)

Abstract Vulnerability in IBM DB2 could allow an authenticated user to view data from a table to which they do not have privilege. Content VULNERABILITY DETAILS CVE ID: CVE-2012-0709 DESCRIPTION: The IBM DB2 products listed below contain a security vulnerability which would allow an authenticated...

CVE-2021-43408: Improper Neutralization of Special Elements used in an SQL Command

The "Duplicate Post" WordPress plugin up to and including version 1.1.9 is vulnerable to SQL Injection. SQL injection vulnerabilities occur when client supplied data is included within an SQL Query insecurely. SQL Injection can typically be exploited to read, modify and delete SQL table data. In...

WordPress plugin WpDataTables – Tables & Table Charts premium 安全漏洞

WordPress is a blogging platform developed by the WordPress Wordpress Foundation using the PHP language. The platform supports PHP and MySQL servers to set up a personal blog site. wpDataTables is used in one of the chart management plugin . WordPress plugin WpDataTables - Tables & Table Charts...

wpDataTables < 3.4.2 - Improper Access Control leading to Table Data Deletion

The plugin has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to delete the data of another user that are present in the same table through idkey and idval parameters. By exploiting this issue an attacker is...

GaussDB: Enable DML Audit

If AUDITLEVEL is set to 4, Data Manipulation Language DML operations, such as INSERT, UPDATE, DELETE, and SELECT are audited. DML is used to manage table data. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

DEBIAN-CVE-2020-10803

In phpMyAdmin 4.x before 4.9.5 and 5.x before 5.0.2, a SQL injection vulnerability was discovered where malicious code could be used to trigger an XSS attack through retrieving and displaying results in tblgetfield.php and libraries/classes/Display/Results.php. The attacker must be able to insert...

CVE-2019-1000004: Improper Neutralization of Input During Web Page Generation

yugandhargangu JspMyAdmin2 version 1.0.6 and earlier contains a Cross Site Scripting XSS vulnerability in sidebar and table data that can result in Database fields aren't properly sanitized and allow code injection Cross-Site Scripting. This attack appears to be exploitable via the payload needs ...

openSUSE Security Update : phpMyAdmin (openSUSE-2012-135)

update to 3.4.10.1 fix for bnc747841 - security XSS in replication setup, see PMASA-2012-1 - 3.4.10.0 2012-02-14 - bug 3460090 interface TextareaAutoSelect feature broken - patch 3375984 export PHP Array export might generate invalid php code - bug 3049209 import Import from ODS ignores cell that...

CVE-2012-0709

IBM DB2 9.5 before FP9, 9.7 through FP5, and 9.8 through FP4 does not properly check variables, which allows remote authenticated users to bypass intended restrictions on viewing table data by leveraging the CREATEIN privilege to execute crafted SQL CREATE VARIABLE statements...