CVE-2024-31961

A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter...

CVE-2024-31961

A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter...

CVE-2024-31961: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in unit.php in Sonic Shopfloor.guide before 3.1.3 allows remote attackers to execute arbitrary SQL commands via the level2 parameter...

Cross-Site Scripting (XSS)

pimcore/pimcore is vulnerable to Cross-Site Scripting XSS. The vulnerability exists in multiple functions of Unit.php due to improper input sanitization which allows an attacker to inject and execute arbitrary javascript...

PT-2017-15029

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue concerns SQL Injection in the Batch Manager component of Piwigo. Specifically, the element ids parameter in the "admin/batch manager unit.php" endpoint is vulnerable when in unit mode. This allows an...

PT-2014-4854

Name of the Vulnerable Software and Affected Versions MobFox mAdserve versions 2.0 and earlier Description The issue allows remote authenticated users to execute arbitrary SQL commands. This can be achieved via the id parameter to specific API endpoints, including "edit ad unit.php", "view...