Search Vulnerabilities

AVEVA Process Optimization SQL Injection

Grocery crud 1.6.4 - 'order_by' SQL Injection

Vianeos OctoPUS 5 - 'login_user' SQLi

Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection

GLPI has an unauthenticated SQL injection through the inventory endpoint

Build Smart ERP 21.0817 - 'eidValue' SQL Injection (Unauthenticated)

Kmaleon 1.1.0.205 - 'tipocomb' SQL Injection (Authenticated)

Aimeos Laravel ecommerce platform 2021.10 LTS - 'sort' SQL injection

Simply Schedule Appointments <= 1.6.9.9 - Unauthenticated SQL Injection via `order` and `append_where_sql` Parameters

Pimcore has a Blind SQL Injection in Admin Search Find API due to an incomplete fix for CVE-2023-30848

Shipping Rate By Cities <= 2.0.0 - Unauthenticated SQL Injection via 'city' Parameter

Shipping Rates by City for WooCommerce <= 1.0.3 - Authenticated (Shop Manager+) SQL Injection via 'cities' Parameter

Social-Share-Buttons 2.2.3 - SQL Injection via project_id Parameter

VIAVIWEB Wallpaper Admin 1.0 SQL Injection via edit_gallery_image.php

VIAVIWEB Wallpaper Admin 1.0 - SQL Injection via Login Page

WorkOrder CMS 0.1.0 - SQL Injection

Aero CMS 0.0.1 - SQL Injection

Senayan Library Management System 9.0.0 - SQL Injection

Microsoft SharePoint Server Remote Code Execution Vulnerability

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiClien...