Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_topusers.php.

Pligg CMS v2.0.2 was discovered to contain a time-based SQL injection vulnerability via the page_size parameter at load_data_for_groups.php. So Filter Shop v3.x was discovered to contain multiple blind SQL injection vulnerabilities via the att_value_id, manu_value_id, opt_value_id, and subcate_value_id parameters at /index.php?route=extension/module/so_filter_shop_by/filter_data.Īn issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL query.

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php.įruits Bazar v1.0 was discovered to contain a SQL injection vulnerability via the recover_email parameter at user_password_recover.php. Web Based Quiz System v1.0 was discovered to contain a SQL injection vulnerability via the qid parameter at update.php. Was ZDI-CAN-16690.Ī SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries.

The specific flaw exists within the GetPopupSubQueryDetails endpoint. Authentication is required to exploit this vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

Symantec backup exec 2014 webshell