Security
Headlines
HeadlinesLatestCVEs

Tag

#sql

CVE-2023-31627: virtuoso 7.2.9 crashed at strhash · Issue #1140 · openlink/virtuoso-opensource

An issue in the strhash component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVE
#sql#dos#docker
CVE-2023-31629: virtuoso 7.2.9 crashed at sqlo_union_scope · Issue #1139 · openlink/virtuoso-opensource

An issue in the sqlo_union_scope component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVE-2023-31631: virtuoso 7.2.9 crashed at sqlo_preds_contradiction · Issue #1137 · openlink/virtuoso-opensource

An issue in the sqlo_preds_contradiction component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVE-2023-31621: virtuoso 7.2.9 crashed at kc_var_col · Issue #1130 · openlink/virtuoso-opensource

An issue in the kc_var_col component of openlink virtuoso-opensource v7.2.9 allows attackers to cause a Denial of Service (DoS) via crafted SQL statements.

CVE-2023-31844: bug_report/SQLi-3.md at main · acmglz/bug_report

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_subject.php?id=.

CVE-2023-31842: bug_report/SQLi-2.md at main · acmglz/bug_report

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/index.php?page=edit_faculty&id=.

CVE-2023-31843: bug_report/SQLi-1.md at main · acmglz/bug_report

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/view_faculty.php?id=.

CVE-2023-31845: bug_report/SQLi-4.md at main · acmglz/bug_report

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manage_class.php?id=.

CVE-2023-1207

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.

CVE-2023-0600

The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 6.9 does not escape user input which is concatenated to an SQL query, allowing unauthenticated visitors to conduct SQL Injection attacks.