Lucene search
+L

2423 matches found

attackerkb
attackerkb
•added 2022/07/14 10:15 p.m.•8 views

CVE-2022-32416

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
NVD
NVD
•added 2022/07/14 10:15 p.m.•21 views

CVE-2022-32415

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/viewproduct&id=...

8.8CVSS0.00969EPSS
SaveExploits1References1
NVD
NVD
•added 2022/07/14 10:15 p.m.•21 views

CVE-2022-32416

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct...

7.2CVSS0.00956EPSS
SaveExploits1References1
Prion
Prion
•added 2022/07/14 10:15 p.m.•24 views

Sql injection

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/viewproduct&id=...

6.5CVSS9AI score0.00969EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/07/14 10:15 p.m.•23 views

Sql injection

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct...

6.5CVSS7.3AI score0.00956EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/14 9:35 p.m.•30 views

CVE-2022-32416

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct...

7.7AI score0.00956EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/14 9:35 p.m.•94 views

CVE-2022-32416

CVE-2022-32416 affects Product Show Room Site v1.0. The vulnerability is a SQL Injection in /psrs/classes/Master.php?f=delete_product, triggered via the id parameter in that endpoint. Multiple sources describe the impact as attackers being able to execute arbitrary SQL and access sensitive data. ...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/14 9:30 p.m.•27 views

CVE-2022-32415

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/viewproduct&id=...

9.3AI score0.00969EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/14 9:30 p.m.•76 views

CVE-2022-32415

CVE-2022-32415 affects Product Show Room Site v1.0. Affected component: the web endpoint handling /psrs/?p=products/view_product&id=, vulnerable to SQL Injection due to unsanitized input in the id parameter. Descriptions across multiple feeds corroborate that an attacker can manipulate the id val...

8.8CVSS9AI score0.00969EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•4 views

CVE-2022-32416: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/07/14 12:00 a.m.•2 views

PT-2022-21310

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue is related to SQL Injection via the /psrs/classes/Master.php?f=delete product API endpoint. This allows for potential manipulation of database queries. No information is provided about t...

7.2CVSS0.00956EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•3 views

CVE-2022-32415: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/viewproduct&id=...

8.8CVSS7.9AI score0.00969EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/14 12:00 a.m.•16 views

Product Show Room Site SQL注入漏洞

Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...

8.8CVSS6AI score0.00969EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/07/14 12:00 a.m.•3 views

PT-2022-21309

Name of the Vulnerable Software and Affected Versions Product Show Room Site version 1.0 Description The issue concerns SQL Injection via the "/psrs/?p=products/view product&id=" endpoint, where the id variable is vulnerable. This allows for potential unauthorized access to database information. ...

8.8CVSS0.00969EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/07/06 12:37 p.m.•13 views

CVE-2022-30620

On Cellinx Camera with guest enabled, attacker with web access can elevate privileges to administrative: "1" to "0" privileges by changing the following cookie values from "isadmin", "showConfig". Administrative Privileges which allows changing various configuration in the camera...

8.8CVSS5.8AI score0.00539EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-30932

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.16 through v5.18.2 Description A potential deadlock issue was identified in the blk ia range sysfs show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•2 views

PT-2022-31274

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description A potential deadlock issue was identified in the blk ia range sysfs show function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

5.7AI score
SaveExploits0References1
CNVD
CNVD
•added 2022/06/27 12:00 a.m.•83 views

74cms Cross-Site Scripting Vulnerability (CNVD-2022-58894)

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Co. 74cmsSE version v3.5.1 contains a cross-site scripting vulnerability, which originates from the lack of user-supplied data and output data validation filtering in /index/notice/show. An attacker could exploit...

4.3CVSS3.3AI score0.00665EPSS
SaveExploits1Affected Software1
OSV
OSV
•added 2022/06/23 5:15 p.m.•17 views

CVE-2022-32131

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

6.1CVSS6.3AI score0.00665EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/23 5:15 p.m.•16 views

CVE-2022-32131

74cmsSE v3.5.1 was discovered to contain a reflective cross-site scripting XSS vulnerability via the path /index/notice/show...

6.1CVSS5AI score0.00665EPSS
SaveExploits1References2
Rows per page
Query Builder