CWE-89

CVE-2022-29904

February 23, 2023 by godfreyd94

The SemanticDrilldown extension for MediaWiki through 1.37.2 (before e688bdba6434591b5dff689a45e4d53459954773) allows SQL injection with certain ‘-‘ and ‘_’ constraints.

CVE-2022-29748

February 23, 2023 by godfreyd94

Simple Client Management System 1.0 is vulnerable to SQL Injection via cmsadmin?page=client/manage_client&id=.

CVE-2022-29749

February 23, 2023 by godfreyd94

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.

CVE-2022-29750

February 23, 2023 by godfreyd94

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.

CVE-2022-29751

February 23, 2023 by godfreyd94

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.

CVE-2022-29807

February 23, 2023 by godfreyd94

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php.