Lucene search
+L

410 matches found

ATTACKERKB
ATTACKERKB
added 2022/06/17 7:15 p.m.3 views

CVE-2022-31941

Rescue Dispatch Management System v1.0 is vulnerable to SQL Injection via \rdms\admin?page=user\manageuser&id=...

9.8CVSS5.9AI score0.01026EPSS
Exploits1References2
OSV
OSV
added 2022/06/16 4:15 p.m.6 views

CVE-2022-31914

Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS via zms/admin/publichtml/saveanimal?anid=24...

5.4CVSS5.8AI score0.00471EPSS
Exploits1References1
OSV
OSV
added 2022/06/10 10:15 a.m.4 views

CVE-2017-20035

A vulnerability, which was classified as problematic, has been found in PHPList 3.2.6. This issue affects some unknown processing of the file /lists/admin/ of the component Subscribe. The manipulation leads to cross site scripting Persistent. The attack may be initiated remotely. Upgrading to...

5.4CVSS4.4AI score0.00569EPSS
Exploits1References2
OSV
OSV
added 2022/06/02 4:15 p.m.7 views

CVE-2022-32010

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/user/index.php?view=edit&id=...

7.2CVSS7.1AI score0.00946EPSS
Exploits1References1
OSV
OSV
added 2022/06/02 2:15 p.m.5 views

CVE-2022-30834

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientmanageaccountdetails.php?bookingid=31&userid=...

7.2CVSS7.1AI score0.00958EPSS
Exploits1References1
OSV
OSV
added 2022/06/02 2:15 p.m.5 views

CVE-2019-12349

An issue was discovered in zzcms 2019. SQL Injection exists in /admin/dlsendsms.php via the id parameter...

9.8CVSS7.4AI score0.01385EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.5 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. zzCMS version 2019 is vulnerable to SQL injection, which stems from the lack of single quotes in the id parameter of /admin/dlsendsms.php. No detailed vulnerability details are currently available...

9.8CVSS5.8AI score0.01385EPSS
Exploits1References2
OSV
OSV
added 2022/05/26 2:15 p.m.4 views

CVE-2022-29684

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/jsdel...

7.2CVSS7.1AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/26 2:15 p.m.4 views

CVE-2022-29666

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

7.2CVSS6AI score0.00915EPSS
Exploits1References2
OSV
OSV
added 2022/05/26 2:15 p.m.7 views

CVE-2022-29666

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/lists/zhuan...

7.2CVSS7.1AI score0.00915EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/26 2:15 p.m.3 views

CVE-2022-29663

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/hy...

7.2CVSS6AI score0.00915EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/26 2:15 p.m.2 views

CVE-2022-29664

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/pic/admin/type/plsave...

8.8CVSS6AI score0.00928EPSS
Exploits1References2
OSV
OSV
added 2022/05/26 2:15 p.m.3 views

CVE-2022-29680

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/user/zudel...

7.2CVSS7.1AI score0.00915EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.3 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability, which originates from the id parameter in /admin.php/User/levelsort that lacks validation of externally...

8.8CVSS6.1AI score0.00928EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.4 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability, which originates from the id parameter in /admin.php/singer/admin/lists/zhuan that lacks validation of...

7.2CVSS6.1AI score0.00915EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.18 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/save for...

7.2CVSS6.1AI score0.00915EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.4 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter in /admin.php/Label/jsdel for external input...

7.2CVSS6.1AI score0.00915EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

Jfinal CMS SQL注入漏洞

Jfinal CMS is a powerful information consulting website developed by java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.1 has a SQL injection vulnerability, the vulnerability originate...

9.8CVSS5.9AI score0.01033EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/26 12:0 a.m.5 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/hy against...

7.2CVSS6.1AI score0.00915EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

Online Sports Complex Booking System SQL注入漏洞

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in /scbs/admin/ categories/viewcategory.php?id=, an attacker can execute...

9.8CVSS8.7AI score0.01091EPSS
Exploits1References2
Rows per page
Query Builder