SQL Injection

Every one of the 5 is a mark on the map. Named now: 1 to 5, most at risk first.

1. REDCap 10.3.4 contains a SQL injection vulnerability in the ToDoList function via sort parameter. The application uses the addition of a string of information from the submitted u…CVE-2020-26712Vanderbilt · 2.1% likely

   CWE-89

2. REDCap before 9.3.0 allows time-based SQL injection in the edit calendar event via the cal_id parameter, such as cal_id=55 and sleep(3) to Calendar/calendar_popup_ajax.php. The at…CVE-2019-14937Vanderbilt · 1.4% likely

   CWE-89

3. A SQL injection issue exists in a file upload handler in REDCap 7.x before 7.0.11 via a trailing substring to SendITController:upload.CVE-2017-7351Vanderbilt · 1.2% likely

   CWE-89

4. SQL injection vulnerability in Vanderbilt REDCap before v.13.8.0 allows a remote attacker to obtain sensitive information via the password reset mechanism in MyCapMobileApp/update…CVE-2023-38825Vanderbilt · CVSS 9.8 · 1.0% likely

   CWE-89

5. REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.CVE-2023-37361Vanderbilt · 0.6% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.