hhyo

8 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-30605

  Multiple SQL injections in sql/instance.py param_edit method in Archery - GHSL-2022-104

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `variable_name` and `variable_value` parameter value in …

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30558

  Multiple SQL injections in sql/data_dictionary.py table_list method in Archery - GHSL-2022-105

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. User input coming from the `db_name` in the `sql/data_dictionary.py` `table_list` e…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30557

  SQL injection in data_dictionary.py table_info method in Archery - GHSL-2022-106

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `data_dictionary.py` `table_i…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30556

  SQL injection in sql_optimize.py optimize_sqltuningadvisor method in Archery - GHSL-2022-107

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `optimize_sqltuningadvisor` m…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30555

  SQL injection in sql_optimize.py explain method in Archery - GHSL-2022-108

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases.Affected versions are subject to SQL injection in the `explain` method in `sql_optim…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30554

  SQL injection in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-103

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql_api/api_workflow.py` end…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30553

  Multiple SQL injections in sql_api/api_workflow.py endpoint in Archery - GHSL-2022-102

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to multiple SQL injections in the `sql_api/api_workfl…

  hhyo Archery
  Apr 18, 2023
• Medium 6.5
  CVE-2023-30552

  SQL injection in sql/instance.py endpoint in Archery - GHSL-2022-101

  Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the `sql/instance.py` endpoint's …

  hhyo Archery
  Apr 18, 2023