Lucene search
+L

13443 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•7 views

CVE-2022-31357: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS8.2AI score0.01079EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/17 12:00 a.m.•8 views

PT-2022-20711

Name of the Vulnerable Software and Affected Versions Online Ordering System version 2.3.2 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/ordering/index.php?q=category&search=" API endpoint. The search parameter is vulnerable. Recommendations For...

9.8CVSS0.01079EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•11 views

CVE-2022-31355: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/index.php?q=category&search=...

9.8CVSS8.2AI score0.01079EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/16 12:15 p.m.•42 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS0.01064EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/06/16 11:22 a.m.•51 views

CVE-2021-41654

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

10AI score0.01064EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/16 12:00 a.m.•9 views

CVE-2021-41654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS8.6AI score0.01064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/16 12:00 a.m.•6 views

PT-2022-11453

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description The issue allows attackers to execute arbitrary SQL commands via the keyValue parameter in the "/coreframe/app/pay/admin/index.php" API endpoint. This enables attackers to manipulate database queries,...

9.8CVSS0.01064EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•58 views

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67151)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a missing filter escape for SQL data in the parent parameter of index,php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...

7.5CVSS4.8AI score0.01243EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•60 views

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67152)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

7.5CVSS4.6AI score0.01243EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/12 12:00 a.m.•9 views

PT-2022-11474

Name of the Vulnerable Software and Affected Versions SEOmatic plugin version 3.4.10 for Craft CMS 3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script via a GET to "/index.php?action=seomatic/file/seo-file-link" with url parameter containing the...

6.1CVSS0.01109EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2022/06/10 10:15 p.m.•8 views

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

9.8CVSS7.3AI score0.01243EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/10 10:15 p.m.•35 views

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

9.8CVSS0.01278EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/10 10:15 p.m.•29 views

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

7.5CVSS9.8AI score0.01243EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/10 9:17 p.m.•46 views

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

10AI score0.01243EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/10 9:17 p.m.•87 views

CVE-2021-41756

CVE-2021-41756 affects dynamicMarkt versions 3.10 and earlier, with SQL injection in the kat parameter of index.php. The vulnerability arises from improper handling of the kat parameter, enabling potentially unauthenticated SQL injection. Public references in the dataset corroborate the descripti...

9.8CVSS9.9AI score0.01243EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/06/10 9:15 p.m.•29 views

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

7.5CVSS9.8AI score0.01243EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/06/10 9:12 p.m.•100 views

CVE-2021-41755

CVE-2021-41755 concerns dynamicMarkt versions

9.8CVSS9.8AI score0.01278EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/10 9:12 p.m.•40 views

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

10AI score0.01278EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•5 views

CVE-2021-41755: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

9.8CVSS8.2AI score0.01278EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•5 views

PT-2022-11477

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions 3.10 and earlier Description The issue is related to SQL injection in the parent parameter of the "index.php" endpoint. This allows for potential exploitation. Recommendations For dynamicMarkt versions 3.10 and earlier, a...

9.8CVSS0.01243EPSS
SaveExploits1References5
Rows per page
Query Builder