Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 21:47:22 +0000 cnvd-2018-13101 https://db.gcve.eu/vuln/cnvd-2018-13101 cnvd-2018-13101 https://db.gcve.eu/vuln/cnvd-2018-13101 fkie_cve-2018-10197 https://db.gcve.eu/vuln/fkie_cve-2018-10197 <p>There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the &#34;userdata&#34; table from the &#34;eloam&#34; database.</p> <p>There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the &#34;userdata&#34; table from the &#34;eloam&#34; database.</p> https://db.gcve.eu/vuln/fkie_cve-2018-10197 GHSA-5m4j-v542-qjc2 https://db.gcve.eu/vuln/ghsa-5m4j-v542-qjc2 <p>There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the &#34;userdata&#34; table from the &#34;eloam&#34; database.</p> <p>There is a time-based blind SQL injection vulnerability in the Access Manager component before 9.18.040 and 10.x before 10.18.040 in ELO ELOenterprise 9 and 10 and ELOprofessional 9 and 10 that makes it possible to read all database content. The vulnerability exists in the ticket HTTP GET parameter. For example, one can succeed in reading the password hash of the administrator user in the &#34;userdata&#34; table from the &#34;eloam&#34; database.</p> https://db.gcve.eu/vuln/ghsa-5m4j-v542-qjc2 gsd-2018-10197 https://db.gcve.eu/vuln/gsd-2018-10197 gsd-2018-10197 https://db.gcve.eu/vuln/gsd-2018-10197