CVE Vulnerability Catalog

A stack-based buffer overflow vulnerability was found in the sub_90F0 function of multimon.cgi in Shibby Tomato 1.28, allowing remote exploitation. The project is superseded by FreshTomato, and this flaw affects only unsupported versions.

A security vulnerability has been detected in Shibby Tomato up to version 1.28. The issue affects the sub_9068 function in the tomatoups.cgi file of the UPS Service component, leading to a stack-based buffer overflow that can be exploited remotely. The project is superseded by FreshTomato, and this vulnerability only affects unsupported versions.

A vulnerability has been identified in Shibby Tomato 1.28 in the get_ups_field function of tomatodata.cgi. Manipulating the Date argument can lead to a stack-based buffer overflow. The attack can be launched remotely.

The SQL injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ticket_id parameter. Attackers can send GET requests to add_facnote.php with crafted SQL payloads to extract sensitive database information including version details.

The SQL injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to city_graph.php with crafted SQL payloads to extract sensitive database information including schema names.

An SQL injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to inc_types_graph.php with crafted SQL payloads to extract sensitive database information including schema names.

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the p1 parameter. Attackers can send GET requests to sever_graph.php with crafted SQL payloads to extract sensitive database information including schema names and other data.

SQL injection vulnerability in Open ISES Project 3.30A allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter. Attackers can send GET requests to the ajax/form_post.php endpoint to extract sensitive database information including schema names.

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the tick_lat and tick_lng parameters. Attackers can send GET requests to nearby.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the frm_passwd parameter. Attackers can send POST requests to main.php with crafted SQL payloads to extract sensitive database information including usernames, database names, and version details.

A vulnerability in Heatmiser Wifi Thermostat 1.7 allows unauthenticated attackers to retrieve administrative credentials by accessing the networkSetup.htm page. Attackers can request this endpoint and extract plaintext username and password values from HTML form fields to gain administrative access.

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the feature_id parameter of boards_buttons/update_feature.php. The feature_id value is concatenated directly into SQL statements without sanitization, allowing attackers to send a crafted GET request with a UNION-based payload to extract sensitive database information including the current user, database name, and DBMS version.

Kados R10 GreenBee has an SQL injection vulnerability in boards_buttons/update_release.php. Unauthenticated attackers can inject malicious code via the release_id parameter, allowing arbitrary SQL queries and extraction of sensitive database information.

MaxOn ERP Software versions 8.x-9.x contain an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis parameters in the log_activity function. Attackers can send POST requests to /index.php/user/log_activity with malicious SQL code in these parameters to extract sensitive database information including version and database names.

A vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to delete arbitrary records by sending a crafted request with the target record's ID. The endpoints admin/modul/mod_pengurus/aksi_pengurus.php and admin/modul/mod_update/aksi_update.php do not verify privileges before processing deletions.

An SQL injection vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST parameter sent to lap-peserta-perdesa-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and extract sensitive database information.

An SQL injection vulnerability in HaPe PKH 1.1 allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelompok' POST parameter sent to lap-anggota-kelompok-pdf.php. Attackers can send a crafted request with a time-based blind payload to infer and extract sensitive database information.

HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to bypass file type validation and upload malicious files. Attackers can upload PHP files through multiple endpoints including aksi_foto.php, aksi_user.php, and aksi_kecamatan.php to execute arbitrary code on the server.

HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php. An unauthenticated attacker can manipulate database queries via the 'id' parameter in the desa module, while authenticated users can exploit the pengurus, fasilitas, and kelompok modules. Successful exploitation allows extraction of sensitive database information such as the current user, database name, and DBMS version.

An SQL injection vulnerability in E-Registrasi Pencak Silat 18.10 allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id_partai parameter. Attackers can send GET requests to monitor_nilai.php with crafted SQL payloads to extract sensitive database information including admin credentials and user data.