52 matches found
CVE-2026-23980 Apache Superset: Improper Neutralization of Special Elements used in a SQL Command
Improper Neutralization of Special Elements used in a SQL Command 'SQL Injection' vulnerability in Apache Superset allows an authenticated user with read access to conduct error-based SQL injection via the sqlExpression or where parameters. This issue affects Apache Superset: before 6.0.0. Users...
CVE-2025-12166
The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection via the order and appendwheresql parameters in all versions up to, and including, 1.6.9.9 due to insufficient escaping on the user supplied parameter and lack o...
CVE-2022-38539
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
CVE-2022-28961
Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...
CVE-2023-39805
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
iCMS SQL Injection Vulnerability
iCMS is a software application. An efficient and simple content management system built with PHP and MySQL. A security vulnerability exists in iCMS v7.0.16, which originated from a SQL injection vulnerability found in the where parameter of admincp.php...
PT-2023-27112 · Icms · Icms
Name of the Vulnerable Software and Affected Versions: iCMS version 7.0.16 Description: The issue is related to a SQL injection vulnerability. It can be exploited via the where parameter at the "admincp.php" endpoint. Recommendations: For iCMS version 7.0.16, avoid using the where parameter in th...
CVE-2023-39805: Improper Neutralization of Special Elements used in an SQL Command
iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php...
MEOL1 SQL Injection Vulnerability
MEOL1 is a PHP project by the individual developer Mies van der Lippe. MEOL1 suffers from a SQL injection vulnerability that stems from a problem with the function GetAnimal in the file opdracht4/index.php, where manipulation of the parameter where can lead to sql injection...
IBAX go-ibax SQL injection vulnerability
IBAX go-ibax is a blockchain system platform from IBAX Corporation. IBAX go-ibax suffers from a SQL injection vulnerability that originates from some unknown functionality in file/api/v2/open/rowsInfo, where manipulation of the parameter where leads to SQL injection...
Sql injection
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
CVE-2022-38539
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
CVE-2022-38539
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
CVE-2022-38539
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
CVE-2022-38539: Improper Neutralization of Special Elements used in an SQL Command
Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...
Archery SQL injection vulnerability
Archery is an open source vulnerability assessment and management tool. A security vulnerability exists in Archery versions v1.7.5 through v1.8.5, which stems from the where parameter in /archive/apply containing a SQL injection vulnerability...
CVE-2022-28961
Spip Web Framework v3.1.13 and below was discovered to contain multiple SQL injection vulnerabilities at /ecrire via the liertrad and where parameters...
PT-2022-19328
Name of the Vulnerable Software and Affected Versions Spip Web Framework versions v3.1.13 and earlier Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/ecrire" endpoint via the lier trad and where parameters. Recommendations For Spip...
Eve Arbitrary Code Execution Vulnerability
Eve pyeve is a Python based open source REST API framework. A security vulnerability exists in the io/mongo/parser.py file in Eve versions prior to 0.7.5. A remote attacker can exploit the vulnerability to execute arbitrary code with the help of the 'where' parameter...