124 matches found
CVE-2025-60736
CVE-2025-60736: 온라인 의약품 가이드의 SQL 인젝션 취약점 요약 이 문서는 온라인 의약품 가이드Online Medicine Guide 웹 애플리케이션에서 발견된 심각한 SQL 인젝션 취약점에 대해 설명합니다. 이 취약점은 승인되지 않은 데이터베이스 접근을 허용하며, 애플리케이션과 사용자에게 심각한 보안 위험을 초래합니다. 제출자 Noah "nxvh" Heraud 1. 제품 정보 영향받는 제품 제품명 : Online Medicine Guide 공급업체 : Code Projects 공급업체 홈페이지 :...
CVE-2026-101092
SiYuan before v3.8.4 fails to enforce publish-access checks in the getCurrentAttrViewImages endpoint, allowing publish readers to retrieve image asset paths from unauthorized databases. Attackers can call the endpoint with an unrendered database identifier obtained through related endpoints to le...
PT-2026-72070
A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database...
PT-2026-43595
A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical...
PT-2026-36186
Name of the Vulnerable Software and Affected Versions SSCMS version 7.4.0 Description An issue exists in the stl:sqlContent tag where the queryString attribute is passed directly to database execution without parameterization or sanitization. This allows attackers to submit encrypted payloads to...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization through the fullTextSearchBlock handler in kernel/api/search.go. An attacker can execute unauthorized SQL statements, including reading, modifying, or deleting database contents, by sending method=2 with a crafte...
CVE-2025-69213
OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajaxcomplete.php endpoint when handling the getsedi operation. An authenticated attacker can inject malicious SQL code through the...
CVE-2025-69213 OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajaxcomplete.php endpoint when handling the getsedi operation. An authenticated attacker can inject malicious SQL code through the...
CVE-2025-69213: Improper Neutralization of Special Elements used in an SQL Command
OpenSTAManager is an open source management software for technical assistance and invoicing. In version 2.9.8 and prior, a SQL Injection vulnerability exists in the ajaxcomplete.php endpoint when handling the getsedi operation. An authenticated attacker can inject malicious SQL code through the...
PT-2026-5909
Name of the Vulnerable Software and Affected Versions Delta Course Automation versions through 04022026 Description Delta Course Automation is susceptible to a SQL Injection issue due to improper neutralization of special elements used in an SQL command. This allows for potential unauthorized...
CVE-2025-51567: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection was found in the /exam/user/profile.php page of kashipara Online Exam System V1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the rname, rcollage, rnumber, rgender and rpassword parameters in a POST HTTP request...
Asseco mMedica 安全漏洞
Asseco mMedica is a medical information management system from Asseco Poland. A security vulnerability exists in Asseco mMedica versions prior to 11.9.5, which stems from the fact that an unauthenticated user can bypass the authentication mechanism by leveraging the mmBackup application, which ma...
EUVD-2020-29459
Malware in sbrugna...
EUVD-2017-16853
Malware in sbrugna...
EUVD-2025-25477
Malicious code in bioql PyPI...
EUVD-2025-16990
Malicious code in bioql PyPI...
EUVD-2024-45995
Malicious code in bioql PyPI...
EUVD-2024-47824
Malicious code in bioql PyPI...
CVE-2025-41032
An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...