CWE-89

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). A privileged authenticated attacker

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manag

Tuleap Open ALM is a libre and open source tool for end to end traceability of application and system developments. Prio

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it

Macrob7 Macs Framework Content Management System - 1.14f was discovered to contain a SQL injection vulnerability via the

The Game Server Status WordPress plugin through 1.0 does not validate or escape the server_id parameter before using it

The Permalink Manager Lite WordPress plugin before 2.2.13.1 does not validate and escape the orderby parameter before us

The Check & Log Email WordPress plugin before 1.0.3 does not validate and escape the "order" and "orderby" GET parameter

The SpiderCatalog WordPress plugin through 1.7.3 does not sanitise or escape the 'parent' and 'ordering' parameters from

The G Auto-Hyperlink WordPress plugin through 1.0.1 does not sanitise or escape an 'id' GET parameter before using it in

The Wow Forms WordPress plugin through 3.1.3 does not sanitise or escape a 'did' GET parameter before using it in a SQL

The Post Content XMLRPC WordPress plugin through 1.0 does not sanitise or escape multiple GET/POST parameters before usi

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" req

The Affiliates Manager WordPress plugin before 2.8.7 does not validate the orderby parameter before using it in an SQL s

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a

The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before u

The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which coul

The Events Manager WordPress plugin before 5.9.8 does not sanitise and escape a parameter before using it in a SQL state

Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.

Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.

Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in P

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) before 9.0.013.1

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution (IWD) 9.0.017.07 allow

An SQL Injection vulnerability exists in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/bad.php.

An SQL Injection vulnerablitly exits in zzcms 8.2, 8.3, 2020, and 2021 via the id parameter in admin/dl_sendmail.php.

The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_a

The Quotes Collection WordPress plugin through 2.5.2 does not validate and escape the bulkcheck parameter before using i

The Rich Reviews by Starfish WordPress plugin before 1.9.6 does not properly validate the orderby GET parameter of the p

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can s

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence

Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability

Emuse - eServices / eNvoice SQL injection can be used in various ways ranging from bypassing login authentication or dum

HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL pa

The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator

An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selec

Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could a

Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could a

Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could a

SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior t

A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior t

SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST

Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior

eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the

eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL

The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin