SQL - CVE CyberSecurity Database News (Page 122)

Nov 21, 2022 WordPress SQL

CVE-2022-38148 Silverstripe silverstripe/framework through 4.11 allows SQL Injection.

This could allow attackers to execute arbitrary SQL commands against the database or obtain sensitive information by injecting valid data into forms. This issue has

Nov 21, 2022 CSRF WordPress SQL My wpdb

CVE-2022-1578 - How a Simple CSRF Flaw in “My wpdb” WordPress Plugin Could Let Attackers Run Arbitrary SQL Queries

WordPress is the world’s most popular content management system, but its security is only as strong as the plugins it runs. In April 2022,

CVE-2022-3720: The Event Monster WordPress Plugin Vulnerability - SQL Injection Exploit Details and Security Patch

Nov 21, 2022 WordPress Exploit SQL PHP Event Monster

CVE-2022-3720: The Event Monster WordPress Plugin Vulnerability - SQL Injection Exploit Details and Security Patch

Previously, we have seen our fair share of WordPress plugin vulnerabilities, and today, attention has been drawn to another popular plugin - The Event Monster.

Nov 21, 2022 WordPress SQL

CVE-2022-3600 The Easy Digital Downloads plugin before 3.1.0.2 has a bug that could lead to CSV injection.

This could be used in advanced malicious ways, for example, uploading a malicious CSV file to an online store and then using the Easy Digital

Nov 21, 2022 Exploit SQL dolibarr

CVE-2022-4093 - Deep Dive Into A Forgotten SQL Injection Threat

In today’s cyber world, SQL injection is still one of the most notorious and effective hacking techniques, often leading to massive company data breaches.