vChamilo XML Sequence Arbitrary SQL

The vulnerability of the vChamilo plugin in the Chamilo LMS system is related to the lack of verification for the validity of XML objects’ sequences. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Cacti reports_user.php Code Execution

The vulnerability of the reportsuser.php component of the Cacti network monitoring software is related to the lack of validation for the sequences of XML objects. Exploiting this vulnerability can allow a malicious actor to increase their privileges and execute arbitrary code...

ManagedIT.asmx SQL Injection

The vulnerability of the ManagedIT.asmx component of the ConnectWise ManagedITSync business management platform is related to the lack of validation for the validity of XML objects’ sequences. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL commands through th...