CVE Vulnerability

CWE-89

CVE-2019-9626

by

PHPSHE 1.7 allows module/index/cart.php pintuan_id SQL Injection to index.php.

CVE-2019-9566

by

FlarumChina v0.1.0-beta.7C has SQL injection via a /?q= request.

CVE-2019-9568

by

The “Forminator Contact Form, Poll & Quiz Builder” plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission.

CVE-2019-9165

by

SQL injection vulnerability in Nagios XI before 5.5.11 allows attackers to execute arbitrary SQL commands via the API when using fusekeys and malicious user id.

CVE-2019-9184

by

SQL injection vulnerability in the J2Store plugin 3.x before 3.3.7 for Joomla! allows remote attackers to execute arbitrary SQL commands via the product_option[] parameter.

CVE-2019-9204

by

SQL injection vulnerability in Nagios IM (component of Nagios XI) before 2.2.7 allows attackers to execute arbitrary SQL commands.