elar lang vulnerabilities and exploits

(subscribe to this query)

7.2

CVSSv3

SQL injection vulnerability in the Workflow Screen in dotCMS prior to 3.3.2 allows remote administrators to execute arbitrary SQL commands via the orderby parameter.

Dotcms Dotcms

7.2

CVSSv3

SQL injection vulnerability in the "Content Types > Content Types" screen in dotCMS prior to 3.7.2 and 4.x prior to 4.1.1 allows remote authenticated administrators to execute arbitrary SQL commands via the _EXT_STRUCTURE_direction parameter.

Dotcms Dotcms

9.8

CVSSv3

SQL injection vulnerability in the categoriesServlet servlet in dotCMS prior to 3.3.1 allows remote not authenticated malicious users to execute arbitrary SQL commands via the sort parameter.

Dotcms Dotcms

8.8

CVSSv3

SQL injection vulnerability in the "Site Browser > Templates pages" screen in dotCMS prior to 3.3.1 allows remote authenticated malicious users to execute arbitrary SQL commands via the orderby parameter.

Dotcms Dotcms

8.8

CVSSv3

SQL injection vulnerability in the "Site Browser > Containers pages" screen in dotCMS prior to 3.3.1 allows remote authenticated malicious users to execute arbitrary SQL commands via the orderby parameter.

Dotcms Dotcms

8.8

CVSSv3

SQL injection vulnerability in the JSONTags servlet in dotCMS prior to 3.3.1 allows remote authenticated malicious users to execute arbitrary SQL commands via the sort parameter.

Dotcms Dotcms

8.8

CVSSv3

SQL injection vulnerability in the "Site Browser > Links pages" screen in dotCMS prior to 3.3.1 allows remote authenticated malicious users to execute arbitrary SQL commands via the orderby parameter.

Dotcms Dotcms

8.8

CVSSv3

SQL injection vulnerability in the "Site Browser > HTML pages" screen in dotCMS prior to 3.3.1 allows remote authenticated malicious users to execute arbitrary SQL commands via the orderby parameter.

Dotcms Dotcms

7.5

CVSSv3

CRLF injection vulnerability in the send email functionality in dotCMS prior to 3.3.2 allows remote malicious users to inject arbitrary email headers via CRLF sequences in the subject.

Dotcms Dotcms

6.5

CVSSv3

The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperRepo...

Tibco Jasperreports Server 6.4.0 Tibco Jasperreports Library 6.4.1 Tibco Jasperreports Server 6.4.2 Tibco Jasperreports Library 6.4.2 Tibco Jasperreports Server Tibco Jasperreports Server 6.4.1 Tibco Jasperreports Server 6.4.3 Tibco Jasperreports Server 7.1.0 Tibco Jasperreports Server 6.3.4 Tibco Jasperreports Library Tibco Jasperreports Library 6.3.4 Tibco Jasperreports Library 6.4.21 Tibco Jasperreports Library 7.1.0 Tibco Jasperreports Library 7.2.0 Tibco Jaspersoft Reporting And Analytics Tibco Jaspersoft

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook