100 matches found
CVE-2023-7096
A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipulation of the argument fieldname/tablename causes sql injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2023-7096: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Faculty Management System 1.0. The affected element is an unknown function of the file /admin/php/crud.php. This manipulation of the argument fieldname/tablename causes sql injection. The attack is possible to be carried out remotely. The exploit has been...
CVE-2023-26813
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
Sql injection
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
CVE-2023-26813
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
CVE-2023-26813: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
CVE-2023-26813
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
CVE-2023-26813
SQL injection vulnerability in com.xnx3.wangmarket.plugin.dataDictionary.controller.DataDictionaryPluginController.java in wangmarket CMS 4.10 allows remote attackers to run arbitrary SQL commands via the TableName parameter to /plugin/dataDictionary/tableView.do...
SQL Injection
nodebatis is vulnerable to sql injection. The vulnerability exists due to the getInsertSql function in sqlBuilder.js which doesn't escape the key and tableName attributes, allowing an attacker to inject and execute malicious SQL queries...
PHP build_tablename function Heap Buffer Overflow DoS
The vulnerability of the buildtablename function in the PHP programming language interpreter is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause service interruptions...
Dreamer CMS has an unspecified vulnerability
Dreamer CMS is a Dreamer Content Management System by Junnan Wang, a personal developer in China. version 4.0.0 of Dreamer CMS has a security vulnerability that originates from the tableName parameter. No detailed vulnerability details are available at this time...
CVE-2021-43084
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
CVE-2021-43084
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
CVE-2021-43084
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
Sql injection
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
CVE-2021-43084
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
CVE-2021-43084
An SQL Injection vulnerability exists in Dreamer CMS 4.0.0 via the tableName parameter...
PT-2022-11774 · Unknown · Dreamer Cms
Name of the Vulnerable Software and Affected Versions: Dreamer CMS version 4.0.0 Description: An SQL Injection issue exists via the tableName parameter. Recommendations: For Dreamer CMS version 4.0.0, avoid using the tableName parameter until a fix is available. Consider restricting access to the...
Dreamer CMS SQL注入漏洞
Dreamer CMS is a Dreamer Content Management System by Junnan Wang, a personal developer in China. version 4.0.0 of Dreamer CMS has a security vulnerability that originates from the tableName parameter. No detailed vulnerability details are available at this time...