CVE-2021-38736

SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...

CVE-2022-43022

OpenCATS v0.9.6 was discovered to contain a SQL injection vulnerability via the tagid variable in the Tag deletion function...

PT-2022-25844 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart versions 3.x Description: A SQL injection issue was found in the Newsletter Custom Popup module of OpenCart. The vulnerability can be exploited via the email parameter at the "index.php?route=extension/module/so newletter custom...

PT-2022-25390 · Zzcms · Zzcms

Name of the Vulnerable Software and Affected Versions: ZZCMS version 2022 Description: The issue is related to a SQL injection vulnerability. It occurs via the keyword parameter at the "/admin/baojia list.php" API endpoint. Recommendations: For ZZCMS version 2022, avoid using the keyword paramete...

CVE-2022-38540

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the createkillsession interface...

Sql injection

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list...

PT-2022-24579

Name of the Vulnerable Software and Affected Versions AeroCMS version 0.1.1 Description The issue is related to SQL Injection via the author parameter. This allows for potential exploitation. Recommendations For AeroCMS version 0.1.1, consider restricting access to the author parameter to minimiz...

PT-2022-23482 · Jizhicms · Jizhicms

Name of the Vulnerable Software and Affected Versions: jizhicms version 2.3.1 Description: The issue is related to SQL injection in the background of the software. Recommendations: For jizhicms version 2.3.1, at the moment, there is no information about a newer version that contains a fix for thi...

GHSA-QV6H-PCF2-2W3G Duplicate Advisory GHSA-hrgx-p36p-89q4

Duplicate Advisory This advisory is a duplicate of GHSA-hrgx-p36p-89q4. This link is maintained to preserve external references. Original Description PrestaShop 1.6.0.10 through 1.7.x before 1.7.8.2 allows remote attackers to execute arbitrary code, aka a "previously unknown vulnerability chain"...

Sql injection

74cmsSE v3.5.1 was discovered to contain a SQL injection vulnerability via the keyword parameter at /home/resume/index...

PT-2022-21216 · Unknown · Youdiancms

Name of the Vulnerable Software and Affected Versions: YoudianCMS version 9.5.0 Description: A SQL injection issue was discovered via the id parameter at the "/App/Lib/Action/Admin/SiteAction.class.php" endpoint. This allows for potential exploitation. No information is provided about the estimat...

Sql injection

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

CVE-2022-30452

ShopWind = v3.4.2 has a Sql injection vulnerability in Database.php...

CVE-2022-27962

Bluecms 1.6 has a SQL injection vulnerability at cooike...

Fancy Product Designer < 4.7.5 - Admin+ SQL Injection

The plugin is vulnerable to SQL Injection due to insufficient escaping and validation of the ID parameter found in the /inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information...

SolarWinds Orion Network Performance Monitor DisableNOCView SQL Injection Privilege Escalation Vulnerability

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Orion Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the DisableNOCView method. The issue results from the lack of prop...

Balbooa Forms, 2.0.6 (not tested on others), SQL Injection

Balbooa Forms, 2.0.6 , SQL Injection...

GNUBOARD5 SQL Injection Vulnerability

GNUBOARD5 is a Web forum system based on PHP and MySQL. A SQL injection vulnerability exists in GNUBOARD5 5.3.2.8 and earlier versions. The vulnerability can be exploited to conduct SQL injection attacks via the tableprefix parameter in installdb.php...

SQL Injection Vulnerability in EoyooCMS Content Management System of Guangxi TangSong Software Co.

EoyooCMS English translation is a set of B / S multi-tier architecture based on . EoyooCMS content management system of Guangxi TangSong Software Co., Ltd. suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

OpenEMR SQL Injection Vulnerability (CNVD-2021-35246)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in interface/forms/eyemag/save.php in OpenEMR version 5.0.2.1. No details of the vulnerability are provided at this time...