135 matches found
PT-2023-30663 · Cuppacms · Cuppacms
Name of the Vulnerable Software and Affected Versions: CuppaCMS version V1.0 Description: The issue allows attackers to run arbitrary SQL commands via the table parameter in the components/table manager/html/edit admin table.php file. This can be exploited by sending malicious input to the affect...
CVE-2023-47990
SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...
CVE-2023-47990
SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...
CVE-2023-34601
Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...
CVE-2023-2114
The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query...
CVE-2023-2114: Improper Neutralization of Special Elements used in an SQL Command
The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query...
SUSE CVE-2006-3388
Cross-site scripting XSS vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148
The CVE-2022-35148 entry concerns maccms10 versions from v2021.1000.1081 to v2022.1000.3031, where a SQL injection exists via the table parameter on the database/columns.html endpoint. Root cause: unsafe handling of the table parameter leads to injection. Impact is described as SQL injection; no ...
CVE-2022-35148
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
CVE-2022-35148: Improper Neutralization of Special Elements used in an SQL Command
maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...
PT-2022-22600 · Maccms10 · Maccms10
Name of the Vulnerable Software and Affected Versions: maccms10 versions v2021.1000.1081 through v2022.1000.3031 Description: A SQL injection issue was found via the table parameter at the "database/columns.html" endpoint. Recommendations: For versions v2021.1000.1081 through v2022.1000.3031, avo...
PT-2020-15379
Name of the Vulnerable Software and Affected Versions fastadmin version 1.0.0.20191212 beta fastadmin-tp6 version 1.0 Description The issue allows for SQL injection when a malicious parameter is passed in the URL /admin/ajax/weigh, after a user with administrator rights has logged in. The table...
CVE-2020-21667
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
CVE-2020-21667
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
CVE-2020-21667: Improper Neutralization of Special Elements used in an SQL Command
In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...
PT-2020-15380
Name of the Vulnerable Software and Affected Versions fastadmin-tp6 version 1.0 Description The issue concerns a lack of filtering for the table parameter in the app/admin/controller/Ajax.php file, allowing a malicious parameter to be passed for SQL injection. Recommendations For fastadmin-tp6...
CVE-2008-5621
Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...