CWE-89

CVE-2020-20122

February 26, 2023 by

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.

February 26, 2023 by

thinkphp-zcms as of 20190715 allows SQL injection via index.php?m=home&c=message&a=add.

February 26, 2023 by

A SQL injection vulnerability in admin.php of DOYOCMS 2.3 allows attackers to execute arbitrary SQL commands via the orders[] parameter.

February 26, 2023 by

BlueCMS v1.6 contains a SQL injection vulnerability via /ad_js.php.

February 26, 2023 by

Kylin has some restful apis which will concatenate SQLs with the user input string, a user is likely to be able to run malicious database queries.

February 26, 2023 by

SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.