Skip to content
OpenAdvisories

Archive

16 July 2023

Vulnerabilities first published on this day (UTC), newest first.

8 results · Clear filters · Feed

  • Medium 5.3

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695.

  • Medium 6.3

    SourceCodester/projectworlds House Rental and Property Listing index.php sql injection

    A vulnerability, which was classified as critical, has been found in SourceCodester/projectworlds House Rental and Property Listing 1.0. This issue affects some unknown processing of the file /index.php. The manipulation of the argument keywords/location lead…

  • Medium 6.3

    Bylancer QuickOrder GET Parameter blog sql injection

    A vulnerability, which was classified as critical, has been found in Bylancer QuickOrder 6.3.7. Affected by this issue is some unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql inje…

  • Medium 6.3

    Bylancer QuickQR GET Parameter blog sql injection

    A vulnerability classified as critical was found in Bylancer QuickQR 6.3.7. Affected by this vulnerability is an unknown functionality of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The att…

  • Medium 6.3

    Bylancer QuickJob GET Parameter sql injection

    A vulnerability classified as critical has been found in Bylancer QuickJob 6.1. Affected is an unknown function of the component GET Parameter Handler. The manipulation of the argument keywords/gender leads to sql injection. It is possible to launch the attac…

  • Medium 6.3

    Bylancer QuickVCard GET Parameter blog sql injection

    A vulnerability was found in Bylancer QuickVCard 2.1. It has been rated as critical. This issue affects some unknown processing of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The attack may…

  • Medium 6.3

    Bylancer QuickAI OpenAI GET Parameter blog sql injection

    A vulnerability was found in Bylancer QuickAI OpenAI 3.8.1. It has been declared as critical. This vulnerability affects unknown code of the file /blog of the component GET Parameter Handler. The manipulation of the argument s leads to sql injection. The atta…

  • Medium 6.7

    Unrestricted Upload of File with Dangerous Type in admidio/admidio

    Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.