CVE-2026-9551

A vulnerability was identified in Das Parking Management System 停车场管理系统 6.2.0. This affects the function xpcmdshell of the file ParkingRecord/ExportParkingRecords of the component API Endpoint. The manipulation of the argument Value leads to sql injection. It is possible to initiate the attack...

PT-2025-40400

Name of the Vulnerable Software and Affected Versions YOSHOP version 2.0 Description The software is susceptible to an unauthenticated SQL injection through the goodsIds parameter of the /api/goods/listByIds API endpoint. The getListByIds function improperly concatenates user-supplied input into ...

PT-2021-21264

Name of the Vulnerable Software and Affected Versions Cerner Mobile Care version 5.0.0 Description A SQL Injection issue allows remote unauthenticated attackers to execute arbitrary SQL commands via a Fullwidth Apostrophe aka U+FF07 in the User ID field of the "default.aspx" page. This can lead t...

PT-2020-13165

Name of the Vulnerable Software and Affected Versions DB Soft SGLAC versions prior to 20.05.001 Description An issue in the SGLAC web frontend allows an attacker to execute arbitrary SQL commands on the SQL Server. This can be achieved by using the xp cmdshell stored procedure through the...

PT-2018-18642

Name of the Vulnerable Software and Affected Versions Square 9 GlobalForms version 6.2.x Description A Time Based SQL injection issue allows remote authenticated attackers to execute arbitrary SQL commands via the match parameter. This can potentially lead to a full server compromise through xp...

Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution

This module exploits XXE and SQL injection flaws in Symantec Endpoint Protection Manager versions 11.0, 12.0 and 12.1. When supplying a specially crafted XML external entity XXE request an attacker can reach SQL injection affected components. As xpcmdshell is enabled in the included database...

Nmap NSE net: ms-sql-xp-cmdshell

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...