Total
18777 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-39850 | 1 Schoolmate Project | 1 Schoolmate | 2024-11-21 | 9.8 Critical |
| Schoolmate v1.3 was discovered to contain multiple SQL injection vulnerabilities via the $courseid and $teacherid parameters at DeleteFunctions.php. | ||||
| CVE-2023-39807 | 1 Nvki | 1 Intelligent Broadband Subscriber Gateway | 2024-11-21 | 9.8 Critical |
| N.V.K.INTER CO., LTD. (NVK) iBSG v3.5 was discovered to contain a SQL injection vulnerability via the a_passwd parameter at /portal/user-register.php. | ||||
| CVE-2023-39806 | 1 Idreamsoft | 1 Icms | 2024-11-21 | 9.8 Critical |
| iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the bakupdata function. | ||||
| CVE-2023-39805 | 1 Idreamsoft | 1 Icms | 2024-11-21 | 9.8 Critical |
| iCMS v7.0.16 was discovered to contain a SQL injection vulnerability via the where parameter at admincp.php. | ||||
| CVE-2023-39796 | 1 Wbce | 1 Wbce Cms | 2024-11-21 | 9.8 Critical |
| SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter. | ||||
| CVE-2023-39654 | 1 Abuquant | 1 Abupy | 2024-11-21 | 9.8 Critical |
| abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.search_to_symbol_dict. | ||||
| CVE-2023-39652 | 1 Themevolty | 1 Theme Volty Video Tab | 2024-11-21 | 9.8 Critical |
| theme volty tvcmsvideotab up to v4.0.0 was discovered to contain a SQL injection vulnerability via the component TvcmsVideoTabConfirmDeleteModuleFrontController::run(). | ||||
| CVE-2023-39651 | 1 Themevolty | 1 Theme Volty Cms Brandlist | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module “Theme Volty CMS BrandList” (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39650 | 1 Themevolty | 1 Theme Volty Cms Blog | 2024-11-21 | 9.8 Critical |
| Theme Volty CMS Blog up to version v4.0.1 was discovered to contain a SQL injection vulnerability via the id parameter at /tvcmsblog/single. | ||||
| CVE-2023-39649 | 1 Themevolty | 1 Theme Volty Cms Category Slider | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS Category Slider module for PrestaShop. In the module “Theme Volty CMS Category Slider” (tvcmscategoryslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39648 | 1 Themevolty | 1 Theme Volty Cms Testimonial | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module “Theme Volty CMS Testimonial” (tvcmstestimonial) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39647 | 1 Themevolty | 1 Theme Volty Cms Category Product | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. In the module “Theme Volty CMS Category Product” (tvcmscategoryproduct) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39646 | 1 Themevolty | 1 Theme Volty Cms Category Chain Slider | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module “Theme Volty CMS Category Chain Slide"(tvcmscategorychainslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39645 | 1 Themevolty | 1 Cms Payment Icon | 2024-11-21 | 9.8 Critical |
| Improper neutralization of SQL parameter in Theme Volty CMS Payment Icon module for PrestaShop. In the module “Theme Volty CMS Payment Icon” (tvcmspaymenticon) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions. | ||||
| CVE-2023-39643 | 1 Blmodules | 1 Xmlfeeds Pro | 2024-11-21 | 9.8 Critical |
| Bl Modules xmlfeeds before v3.9.8 was discovered to contain a SQL injection vulnerability via the component SearchApiXml::Xmlfeeds(). | ||||
| CVE-2023-39642 | 1 Carts.guru | 1 Cartsguru | 2024-11-21 | 9.8 Critical |
| Carts Guru cartsguru up to v2.4.2 was discovered to contain a SQL injection vulnerability via the component CartsGuruCatalogModuleFrontController::display(). | ||||
| CVE-2023-39641 | 1 Activedesign | 1 Full Affiliates | 2024-11-21 | 9.8 Critical |
| Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent(). | ||||
| CVE-2023-39640 | 1 Uplight | 1 Cookie Law | 2024-11-21 | 9.8 Critical |
| UpLight cookiebanner before 1.5.1 was discovered to contain a SQL injection vulnerability via the component Hook::getHookModuleExecList(). | ||||
| CVE-2023-39639 | 1 Leotheme | 1 Leoblog | 2024-11-21 | 9.8 Critical |
| LeoTheme leoblog up to v3.1.2 was discovered to contain a SQL injection vulnerability via the component LeoBlogBlog::getListBlogs. | ||||
| CVE-2023-39582 | 1 Chamilo | 1 Chamilo Lms | 2024-11-21 | 4.9 Medium |
| SQL Injection vulnerability in Chamilo LMS v.1.11 thru v.1.11.20 allows a remote privileged attacker to obtain sensitive information via the import sessions functions. | ||||