CWE-89

CVE-2022-46764

February 23, 2023 by godfreyd94

A SQL injection issue in the web API in TrueConf Server 5.2.0.10225 allows remote unauthenticated attackers to execute arbitrary SQL commands, ultimately leading to remote code execution.

The Hide My WP WordPress plugin before 6.2.9 does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVE-2022-46623

February 23, 2023 by godfreyd94

Judging Management System v1.0.0 was discovered to contain a SQL injection vulnerability via the username parameter.

CVE-2022-46442

February 23, 2023 by godfreyd94

dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ sql_ n query.php there are no restrictions on the sql query.

CVE-2022-46443

February 23, 2023 by godfreyd94

mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.

CVE-2022-46471

February 23, 2023 by godfreyd94

Online Health Care System v1.0 was discovered to contain a SQL injection vulnerability via the consulting_id parameter at /healthcare/Admin/consulting_detail.php.