OpenEMR SQL Injection Vulnerability (CNVD-2021-35244)

OpenEMR is a medical practice management software that also supports electronic medical records EMR. A SQL injection vulnerability exists in library/customtemplate/ajaxcode.php in OpenEMR version 5.0.2.1. No detailed vulnerability details are provided at this time...

Activity Log < 2.7.0 - Authenticated SQL Injection

The plugin was vulnerable to SQL Injection in the order column of the past events table. PoC time curl 'http://www.example.com/wp-admin/admin.php?page=activitylogpage=histtime%20AND%20SLEEP%280%29' -H 'Cookie: ...'...

JeecgBoot suffers from a SQL injection vulnerability (CNVD-2021-34558)

JeecgBoot is a low-code BPM-based platform. JeecgBoot suffers from a SQL injection vulnerability that can be exploited by an attacker to obtain sensitive information about a database...

PbootCMS suffers from SQL injection vulnerability (CNVD-2021-32805)

PbootCMS is a new core permanent open source free PHP web development and building management system CMS developed by Avantech. PbootCMS has a SQL injection vulnerability. Attackers can use this vulnerability to obtain sensitive information from the database...

SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.

Ltd. was founded in 2001, specializing in providing e-commerce solutions and services for Chinese and foreign customers in various industries as well as Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Quchuang Technology Co., Lt...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29125)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29126)

SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

PT-2021-15675 · WordPress · Wp-Google-Map-Plugin

Name of the Vulnerable Software and Affected Versions: WP Google Map Plugin WordPress plugin versions prior to 4.1.5 Description: The issue concerns unvalidated input in the Manage Locations page within the plugin settings, which is vulnerable to SQL Injection. This can be exploited through a hig...

PT-2021-2263 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct SQL injection attacks o...

SongCMS suffers from SQL injection vulnerability (CNVD-2021-09669)

SongCMS is a PHP MySQL, ASP Access/SQL Server based development , enterprise-oriented , multi-language support , free , open source CMS, to help business users to quickly build and deploy enterprise-level portal . SongCMS SQL injection vulnerability , attackers can use the vulnerability to obtain...

Slider by 10Web < 1.2.36 - Multiple Authenticated SQL Injection

The bulkaction, exportfull and savesliderdb functionalities of the plugin were vulnerable, allowing a high privileged user Admin, or medium one such as Contributor+ if "Role Options" is turn on for other users to perform a SQL Injection attacks. Vulnerable param: check Vulnerable function:...

PT-2020-18687 · WordPress · Srs Simple Hits Counter Plugin

Name of the Vulnerable Software and Affected Versions: SRS Simple Hits Counter Plugin for WordPress versions 1.0.3 through 1.0.4 Description: The issue is related to SQL Injection, where improper neutralization of special elements used in an SQL command allows a remote, unauthenticated attacker t...

PT-2020-7378 · Boinc · Boinc

Name of the Vulnerable Software and Affected Versions: BOINC affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, due to multiple SQL injection vulnerabilities. Recommendations: At the moment, there is no...

CVE-2019-10653

An issue was discovered in Hsycms V1.1. There is a SQL injection vulnerability via a /news/.html page...

CVE-2019-10664

Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp...

WordPress WP-Smushit 3.0.2 SQL Injection

Exploit Title : WordPress WP-Smushit Plugins 3.0.2 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 28/01/2019 Vendor Homepage : premium.wpmudev.org Software Download Link : downloads.wordpress.org/plugin/wp-smushit.3.0.2.zip Software Information Li...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Easy Car Script 2014 - SQL Injection

Exploit Title: Easy Car Script 2014 - SQL Injection Dork: N/A Date: 23.01.2018 Vendor Homepage: http://www.easyphotostore.com/ Software Link: http://www.easycarscript.com/ Version: 2014 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-2018-5986 Exploit Author: Ihsan Sencan Author Web:...

Trend Micro Control Manager GetScheduleSubscription SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

Laundry Booking Script 1.0 - list?city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Laundry Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/laundry-booking-script/ Version: 1.0 Category: Webapps...