SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector. (CVSS:9.8) (Last Update:2023-09-21 20:15:10)

Dreamer CMS 4.1.3 is vulnerable to SQL Injection. (CVSS:0.0) (Last Update:2023-09-21 18:15:12)

Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The issue has been fixed in the `main` branch. Users won't face this issue if they are using the latest main branch of the app. (CVSS:6.3) (Last Update:2023-09-21 17:15:24)

SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModuleFrontController::prepareHook() method. (CVSS:9.8) (Last Update:2023-09-21 17:15:16)

Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters of the web interface without authentication. The database contains limited, non-critical log information. (CVSS:5.3) (Last Update:2023-09-21 07:15:20)

SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php. (CVSS:0.0) (Last Update:2023-09-20 22:22:59)

SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFrontController::initContent() and OpartSaveCartDefaultModuleFrontController::displayAjaxSendCartByEmail() methods. (CVSS:9.8) (Last Update:2023-09-20 22:23:01)

Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid/clienti.php via the annonascita, annoscaddoc, giornonascita, giornoscaddoc, lingua_cli, mesenascita, and mesescaddoc parameters. (CVSS:0.0) (Last Update:2023-09-20 20:18:38)