sql injection vulnerabilities and exploits

Harbor SQL Injection via user-groups. Cure53 has discovered that a user with Project-Admin capabilities can utilize and exploit SQL Injection to read secrets from the underlying database or conduct privilege escalation. The vulnerability was immediately fixed by the Harbor team...

Linuxfoundation Harbor Pivotal Vmware Harbor Registry -

7.5

CVSSv2

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application....

Djangoproject Django Fedoraproject Fedora 344 Github repositories available

4

CVSSv2

Harbor SQL Injection via project quotas. Cure53 has discovered a SQL injection vulnerability in the quotas section of the Harbor API. An authenticated administrator can send a specially crafted SQL payload through the GET parameter sort, allowing the extraction of sensitive...

Linuxfoundation Harbor Pivotal Vmware Harbor Registry -

5

CVSSv2

An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It has Cleartext Storage of Sensitive Information....

Gitlab Gitlab

6.5

CVSSv2

Gila CMS 1.11.8 allows /admin/sql?query= SQL Injection....

Gilacms Gila Cms 1.11.81 Github repository available

7.5

CVSSv2

Sql injection vulnerability in the yccms 3.3 project. The no_top function's improper judgment of the request parameters, triggers a sql injection vulnerability....

Yccms Yccms 3.3

6.8

CVSSv2

In the Divido plugin for OpenCart, there is SQL injection. Attackers can use SQL injection to get some confidential information....

Divido Divido -

7.5

CVSSv2

Tasking Manager before 3.4.0 allows SQL Injection via custom SQL....

Hostosm Tasking Manager

5

CVSSv2

dl/dl_sendmail.php in zzcms 8.3 has SQL Injection via the sql parameter....

Zzcms Zzcms 8.31 Github repository available

7.5

CVSSv2

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection....

Saltos Saltos 3.11 EDB exploit available

Get Started

« PREV 1 2 3 4 5 6 7 8 9 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

sql injection vulnerabilities and exploits

Vulmon Search

About

Products

Connect