Skip to content
OpenAdvisories

Vendor

bylancer

11 known vulnerabilities.

Products

Zechat 4 QuickQR 1 QuickAI OpenAI 1 QuickJob 1 QuickOrder 1 Quicklancer 1 QuickVCard 1 Bookme – Free Online Appointment Booking and Scheduling Plugin 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2018-25382

    Zechat 1.5 SQL Injection via uname Parameter

    Zechat 1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the uname parameter. Attackers can send crafted requests to profile.php with UNION-based SQL injection paylo…

    bylancer Zechat
  • High 8.2
    CVE-2018-25339

    Zechat 1.5 SQL Injection via v parameter (time-based blind)

    Zechat 1.5 contains a SQL injection vulnerability in the v parameter that allows unauthenticated attackers to extract database information using time-based blind techniques. Attackers can exploit the v parameter with sleep-based blind injection to confirm vul…

    bylancer Zechat
  • High 8.2
    CVE-2018-25338

    Zechat 1.5 SQL Injection via hashtag parameter

    Zechat 1.5 contains a SQL injection vulnerability in the hashtag parameter that allows unauthenticated attackers to extract database information using union-based techniques. Attackers can exploit the hashtag parameter with union-based payloads to retrieve ta…

    bylancer Zechat
  • High 7.3
    CVE-2024-7188 Scanner template

    Bylancer Quicklancer GET Parameter listing sql injection

    A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the component GET Parameter Handler. The manipulation of the argument range2 leads to sql injection. The a…

    bylancer Quicklancer