CVE Vulnerability

CWE-89

CVE-2021-28053

by

An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. A SQL injection vulnerability in “Configuration > Users > Contacts / Users” allows remote authenticated users to execute arbitrary SQL commands via the Additional Information parameters.

CVE-2021-27946

by

SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3).

CVE-2021-27947

by

SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3).

CVE-2021-27948

by

SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3).

CVE-2021-27950

by

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA.

CVE-2021-27973

by

SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.