Lucene search
+L

13447 matches found

CVE
CVE
•added 2022/06/10 9:12 p.m.•100 views

CVE-2021-41755

CVE-2021-41755 concerns dynamicMarkt versions

9.8CVSS9.8AI score0.01278EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/10 9:12 p.m.•40 views

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

10AI score0.01278EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•5 views

CVE-2021-41755: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

9.8CVSS8.2AI score0.01278EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•5 views

PT-2022-11477

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions 3.10 and earlier Description The issue is related to SQL injection in the parent parameter of the "index.php" endpoint. This allows for potential exploitation. Recommendations For dynamicMarkt versions 3.10 and earlier, a...

9.8CVSS0.01243EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•6 views

PT-2022-11479

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions prior to 3.10 Description The issue is related to SQL injection in the kat parameter of "index.php". Recommendations For dynamicMarkt versions prior to 3.10, update to a version that contains a fix for this issue...

9.8CVSS0.01243EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•5 views

PT-2022-11478

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions prior to 3.10 Description The issue is related to SQL injection in the kat1 parameter of the "index.php" endpoint. Recommendations For versions prior to 3.10, update to a version that contains a fix for this issue. At the...

9.8CVSS0.01278EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•9 views

CVE-2021-41756: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

9.8CVSS8.2AI score0.01243EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/10 12:00 a.m.•22 views

dynamicMarkt SQL注入漏洞

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

9.8CVSS5.8AI score0.01243EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•7 views

CVE-2021-41754: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

9.8CVSS8.2AI score0.01243EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•10 views

CVE-2017-20029: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

9.8CVSS7.7AI score0.21001EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•8 views

PT-2022-7902

Name of the Vulnerable Software and Affected Versions PHPList versions 3.2.6 Description A critical issue affects the processing of the file /lists/index.php of the component Edit Subscription, leading to sql injection. The attack may be initiated remotely. Recommendations For PHPList version...

9.8CVSS0.21001EPSS
SaveExploits1References5
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•62 views

Simple Bus Ticket Booking System SQL Injection Vulnerability

Simple Bus Ticket Booking System is a bus ticket booking system. version 1.0 of Simple Bus Ticket Booking System is vulnerable to SQL injection attack via /SimpleBusTicket/index.php...

7.5CVSS4.3AI score0.01137EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•60 views

phpABook SQL Injection Vulnerability

phpABook is a simple address/contact management system using PHP and MySQL. phpABook version 0.9i is vulnerable to a SQL injection vulnerability caused by a failure to properly clean up the "authuser" parameter in the index.php script. An attacker could use this vulnerability to execute illegal S...

7.5CVSS3.7AI score0.01889EPSS
SaveExploits1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•7 views

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

9.8CVSS7.4AI score0.01889EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/02 2:15 p.m.•25 views

Sql injection

Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php...

7.5CVSS9.8AI score0.01137EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/02 12:00 a.m.•9 views

PT-2022-21036

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns a SQL Injection vulnerability. It can be exploited via the "/eris/admin/company/index.php?view=edit&id=" API endpoint, specifically through the id variable. This allo...

7.2CVSS0.04563EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•12 views

CVE-2022-32010: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...

7.2CVSS7.2AI score0.00996EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•8 views

CVE-2022-32008: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via eris/admin/vacancy/index.php?view=edit&id=...

7.2CVSS7.2AI score0.00996EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•16 views

CVE-2022-32014: Improper Neutralization of Special Elements used in an SQL Command

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=result&searchfor=byfunction...

7.2CVSS7.2AI score0.00996EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/02 12:00 a.m.•6 views

PT-2022-21043

Name of the Vulnerable Software and Affected Versions Complete Online Job Search System version 1.0 Description The issue concerns SQL Injection via the "/eris/index.php?q=category&search=" endpoint. This allows for potential exploitation. No information is provided about the estimated number of...

7.2CVSS0.04563EPSS
SaveExploits1References5
Rows per page
Query Builder