Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2026/01/15 12:0 a.m.1 views

PT-2026-3042

Kmaleon 1.1.0.205 contains an authenticated SQL injection vulnerability in the 'tipocomb' parameter of kmaleonW.php that allows attackers to manipulate database queries. Attackers can exploit this vulnerability using boolean-based, error-based, and time-based blind SQL injection techniques to...

7.1CVSS7.8AI score0.00016EPSS
Exploits0References3
OSV
OSV
added 2022/05/05 12:0 a.m.0 views

GHSA-W559-623P-VFG8 MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

MyBatis PageHelper versions 3.5.x through 5.3.x were discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS7.2AI score0.00734EPSS
Exploits2References8
Github Security Blog
Github Security Blog
added 2022/05/05 12:0 a.m.32 views

MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter

MyBatis PageHelper versions 3.5.x through 5.3.x were discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS4.6AI score0.00734EPSS
Exploits1References9Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/05 12:0 a.m.3 views

PT-2022-26316 · Unknown +1 · Mybatis Pagehelper +1

Name of the Vulnerable Software and Affected Versions: jsonlint version 1.0 MyBatis PageHelper versions 3.5.x through 5.3.x Description: The issue involves a heap-buffer-overflow in jsonlint and a time-blind SQL injection vulnerability in MyBatis PageHelper. The jsonlint vulnerability occurs via...

9.8CVSS8.7AI score0.00734EPSS
Exploits2References13
NVD
NVD
added 2022/05/04 1:15 p.m.16 views

CVE-2022-28111

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS0.00734EPSS
Exploits1References6
ATTACKERKB
ATTACKERKB
added 2022/05/04 1:15 p.m.0 views

CVE-2022-28111

MyBatis PageHelper v1.x.x-v3.7.0 v4.0.0-v5.0.0,v5.1.0-v5.3.0 was discovered to contain a time-blind SQL injection vulnerability via the orderBy parameter...

9.8CVSS6AI score0.00734EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2022/05/04 12:0 a.m.2 views

PT-2022-18817 · Unknown · Mybatis Pagehelper

Name of the Vulnerable Software and Affected Versions: MyBatis PageHelper versions 1.x.x through 5.3.x Description: A time-blind SQL injection vulnerability was discovered in MyBatis PageHelper via the orderBy parameter. This issue allows for potential SQL injection attacks. Recommendations: For...

9.8CVSS8.7AI score0.00734EPSS
Exploits2References12
seebug.org
seebug.org
added 2017/03/07 12:0 a.m.25 views

Joomla! Component JO Facebook Gallery v4.5 - SQL Injection

Joomla! Component JO Facebook Gallery v4. 5 - SQL Injection index. php id parameter into the SQL statement exist GET the type of injection Injection point: http://localhost/PATH/index. php? option=comjofacebookgallery&view=category&id=SQL http://localhost/PATH/index. php?...

7.6AI score
Exploits0
seebug.org
seebug.org
added 2016/08/04 12:0 a.m.11 views

Kingdee OA /stock/cash/tree/get_flow. jsp parameter ids time blind

No description provided by source...

7.1AI score
Exploits0
Rows per page
Query Builder