EUVD-2024-54498

Malicious code in bioql PyPI...

PT-2025-12759

Name of the Vulnerable Software and Affected Versions SirsiDynix Horizon Information Portal versions through 3.25 9382 Description The issue allows SQL Injection to occur. This happens in the ipac.jsp file, specifically in a SELECT WHERE statement, and involves the uri variable within the full...

CVE-2024-44903: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection can occur in the SirsiDynix Horizon Information Portal IPAC20 through 3.259382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable...

CVE-2006-1499

SQL injection vulnerability in vCounter.php in vCounter 1.0 allows remote attackers to execute arbitrary SQL commands via the URI SERVERREQUESTURI variable...

SPChat 0.8 Module - Remote File Inclusion

SPChat 0.8 Module - Remote File Inclusion source: https://www.securityfocus.com/bid/7780/info SPChat has been reported prone to a remote file include vulnerability. The issue presents itself due to insufficient sanitization performed on the user-supplied URI variable 'statussess' by the SPChat...

Vignette 4.x/5.0 - Memory Disclosure

source: https://www.securityfocus.com/bid/7684/info Vignette is prone to an issue which may expose the contents of memory to remote attackers. This condition is due to a flaw in how StoryServer calculates the size of certain characters in URI variables, which may cause data from adjacent memory t...