SQL Injection

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. A SQL injection vulnerability in the tracker functionality of Enalean Tuleap software engineering platform before 9.18 allows attackers to execute arbitrary SQL commands.CVE-2018-7538Enalean · 4.2% likely

   CWE-89

2. SQL injection vulnerability in Enalean Tuleap before 7.5.99.4 allows remote authenticated users to execute arbitrary SQL commands via the lobal_txt parameter to plugins/docman.CVE-2014-7176Enalean · 2.2% likely

   CWE-89

3. SQL injection in the planning edition panelCVE-2021-41147Enalean · CVSS 7.2 · 1.9% likely

   CWE-89

4. SQL injection in TuleapCVE-2021-43806Enalean · CVSS 8.8 · 1.6% likely

   CWE-89

5. SQL injection in CVS revisions browserCVE-2021-41155Enalean · CVSS 8.8 · 1.5% likely

   CWE-89

6. SQL injection in the "SVN core" commits browserCVE-2021-41154Enalean · CVSS 8.8 · 1.5% likely

   CWE-89

7. The update of the CI job targeted by a widget is vulnerable to blind SQL injectionsCVE-2021-41148Enalean · CVSS 8.8 · 1.5% likely

   CWE-89

8. SQL injection via the field name of a tracker in TuleapCVE-2022-31058Enalean · CVSS 7.2 · 1.5% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.