CVE
Vendors
Products
Updated
CVSS v2
CVSS v3
The Alfresco application before 1.8.7 for Android allows SQL injection in HistorySearchProvider.java.
The ICOMMKT connector before 1.0.7 for PrestaShop allows SQL injection in icommktconnector.php.
The Compassion Switzerland addons 10.01.4 for Odoo allow SQL injection in models/partner_compassion.py.
Observational Health Data Sciences and Informatics (OHDSI) WebAPI before 2.7.2 allows SQL injection in FeatureExtractionService.java.
** DISPUTED ** GORM before 1.9.10 allows SQL injection via incomplete parentheses. NOTE: Misusing Gorm by passing untrusted user input where Gorm expects trusted SQL fragments is a vulnerability in the application, not in Gorm.
FlashLingo before 2019-06-12 allows SQL injection, related to flashlingo.js and db.js.
The Reviews Module before 2019-06-14 for OpenSource Table allows SQL injection in database/index.js.
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during [2019]. Notes: none.
DianoxDragon Hawn before 2019-07-10 allows SQL injection.
XM^online 2 Common Utils and Endpoints 0.2.1 allows SQL injection, related to Constants.java, DropSchemaResolver.java, and SchemaChangeResolver.java.
