106 matches found
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
Sql injection
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
PT-2022-20301
Name of the Vulnerable Software and Affected Versions Calibre-Web versions prior to 0.6.18 Description The issue allows for SQL Injection in the user table. Recommendations For versions prior to 0.6.18, update to version 0.6.18 or later to resolve the issue...
CVE-2022-30765: Improper Neutralization of Special Elements used in an SQL Command
Calibre-Web before 0.6.18 allows user table SQL Injection...
Navidrome SQL Injection Vulnerability
Navidrome is a web-based open source music collection server and streamer. Used to freely listen to music collections from any browser or mobile device, a SQL injection vulnerability exists in versions of Navidrome prior to 0.47.5, which stems from a lack of validation of externally entered SQL...
CVE-2022-23857
model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table which contains sensitive information such as the users...
Sql injection
model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table which contains sensitive information such as the users...
CVE-2022-23857
model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table which contains sensitive information such as the users...
Social Networking Site SQL Injection
Exploit Title: Social Networking Site - Authentication Bypass SQli Date: 2020-11-17 Exploit Author: gh1mau Email: [email protected] Team Members: Capt'N, muzzo, chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...
Joomla! 2.5.x < 3.9.20 Multiple Vulnerabilities
According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.20. It is, therefore, affected by multiple vulnerabilities. - A missing token check in the ajaxinstall endpoint cominstaller causes a CSRF vulnerability. - Missing validation...
Unspecified vulnerability in Joomla! (CNVD-2020-44909)
Joomla! is the U.S. Open Source Matters team of a set of PHP and MySQL development using open source , cross-platform content management system CMS. A security vulnerability exists in Joomla! 3.9.19 and earlier versions, which can be exploited by an attacker to modify internal read-only fields in...
Advantech iView Access Control Error Vulnerability
Advantech iView is a device management application from Advantech. An Access Control Error vulnerability exists in Advantech iView 5.6 and prior versions. A remote attacker can exploit the vulnerability to obtain information from the user table, including administrator credentials in plain text...
CVE-2020-15697
An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...
CVE-2020-15697
An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...
Code injection
An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...
CVE-2020-15697
An issue was discovered in Joomla! through 3.9.19. Internal read-only fields in the User table class could be modified by users...
CVE-2020-15697
CVE-2020-15697 affects Joomla! up to version 3.9.19. The issue is that internal read-only fields in the User table class could be modified by users, enabling unauthorized modification of user data and impacting data integrity. The reliable sources in the connected documents corroborate this speci...