CVE-2023-5693 CodeAstro Internet Banking System pages_reset_pwd.php sql injection

A vulnerability was found in CodeAstro Internet Banking System 1.0 and classified as critical. This issue affects some unknown processing of the file pagesresetpwd.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2023-44694

D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /log/mailrecvview.php...

PT-2023-32201 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: librenms versions prior to 23.10.0 Description: The issue is related to SQL Injection in the GitHub repository librenms/librenms. Recommendations: For versions prior to 23.10.0, update to version 23.10.0 or later to resolve the issue...

PT-2023-29008 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: Jizhicms version 2.4.9 Description: The issue is related to a SQL injection vulnerability in the backend, allowing users to obtain database information. Recommendations: For Jizhicms version 2.4.9, at the moment, there is no information about...

CVE-2023-31719

FUXA = 1.1.12 is vulnerable to SQL Injection via /api/signin...

CVE-2023-43371

Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the numcaselle parameter at /hoteldruid/creaprezzi.php...

PT-2023-22522 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was...

CVE-2023-39650

Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single...

CVE-2023-37847

novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability...

ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66426)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which can be exploited by an attacker to execute illegal SQL...

PT-2023-5475 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.11.1 and below Description: The issue is related to a SQL injection vulnerability in the update banner message function of the Nagios XI monitoring tool. This vulnerability arises from inadequate protection of the SQL que...

PT-2023-26792 · Bmc · Bmc Control-M

Name of the Vulnerable Software and Affected Versions: BMC Control-M versions prior to 9.0.21 BMC Control-M version 9.0.20.200 Description: The issue allows SQL injection via the "/RF-Server/report/deleteReport" API endpoint, specifically through the report-id parameter. Recommendations: For BMC...

PT-2023-22634 · Unknown · Chatengine

Name of the Vulnerable Software and Affected Versions: ChatEngine version 1.0 Description: The issue allows attackers to gain sensitive information through a SQL Injection vulnerability in the textMessage parameter in the /src/chatbotapp/chatWindow.java file. Recommendations: For ChatEngine versi...

Sql injection

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the lid parameter at admin/index.php?mode=settings&page=lang&action=edit...

CVE-2023-34753

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the tid parameter at admin/index.php?mode=settings&page=tmpl&action=edit...

CVE-2023-33817

hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability...

CVE-2023-33362

Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function...

CVE-2023-30191

PrestaShop cdesigner 3.1.9 is vulnerable to SQL Injection via CdesignerTraitementModuleFrontController::initContent...

CVE-2023-27733

DedeCMS v5.7.106 was discovered to contain a SQL injection vulnerability via the component /dede/syssqlquery.php...

PT-2023-21721 · Pimcore · Pimcore

Name of the Vulnerable Software and Affected Versions: Pimcore versions prior to 10.5.19 Description: Pimcore is an open source data and experience management platform. Since a user with 'report' permission can already write arbitrary SQL queries and given the fact that an endpoint is using the G...