Lucene search
+L

511 matches found

OSV
OSV
added 2022/05/02 7:15 p.m.5 views

CVE-2022-1370

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.5AI score0.01172EPSS
SaveExploits0References1
NVD
NVD
added 2022/05/02 7:15 p.m.21 views

CVE-2022-1370

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS0.01172EPSS
SaveExploits0References1
Prion
Prion
added 2022/05/02 7:15 p.m.19 views

Sql injection

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEprivgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS9.7AI score0.01172EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2022/05/02 6:15 p.m.19 views

CVE-2022-1366

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

10CVSS0.18915EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/28 12:0 a.m.8 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.01172EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/28 12:0 a.m.6 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.01172EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:0 a.m.13 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the /opensis/functions/GetStuListFnc.php &Grade= parameter...

9.8CVSS8.2AI score0.01305EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:0 a.m.9 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the /opensis/modules/grades/InputFinalGrades.php parameter...

9.8CVSS8.2AI score0.01305EPSS
SaveExploits1References3Affected Software1
RubySec
RubySec
added 2022/04/20 12:0 a.m.37 views

SQL injection for certain queries with variables

For some queries, specific variable values can modify the query rather than just the variable. This can occur if: 1. the query's data source uses different escaping than the Rails database OR 2. the query has a variable inside a string literal Since Blazer is designed to run arbitrary queries, th...

7.5CVSS2.6AI score0.00857EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/04/13 12:0 a.m.9 views

Gin-Vue-Admin SQL注入漏洞

Gin-Vue-Admin is a full-stack pre-development infrastructure platform based on Vue and Gin. Gin-Vue-Admin is vulnerable to SQL injection, which can be exploited by attackers to execute arbitrary SQL statements...

8.8CVSS8.4AI score0.0144EPSS
SaveExploits1References5
Veracode
Veracode
added 2022/04/06 4:44 p.m.21 views

SQL Injection

MS MCMS is vulnerable to sql injection. The vulnerability exists in list function in ContentAction.java which allows a malicious user to inject and execute arbitrary SQL queries on the server...

9.8CVSS3.5AI score0.05617EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/03/29 5:15 p.m.3 views

CVE-2022-26065

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.5AI score0.01172EPSS
SaveExploits0References1
Prion
Prion
added 2022/03/29 5:15 p.m.19 views

Sql injection

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerDialogKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

7.5CVSS9.7AI score0.01004EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.7 views

CVE-2022-26836 Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.9AI score0.01172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.7 views

CVE-2022-0923 Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in HandlerDialogKID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.8AI score0.01004EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.8 views

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.8AI score0.01172EPSS
SaveExploits0References1
Veracode
Veracode
added 2022/03/25 9:42 a.m.17 views

SQL Injection

forkcms/forkcms is vulnerable to SQL Injection attacks. The vulnerability exists in deleteData function in Model.php due to lack of validations which allows a malicious user to inject and execute arbitrary SQL queries on the server...

7.5CVSS4AI score0.01111EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/03/25 12:0 a.m.9 views

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protection for the structure of SQL queries, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Cyrus SASL authentication mechanism lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9.4CVSS7.4AI score0.04123EPSS
SaveExploits0References13Affected Software6
CNNVD
CNNVD
added 2022/03/22 12:0 a.m.7 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS6.2AI score0.01172EPSS
SaveExploits0References5
Veracode
Veracode
added 2022/03/16 8:25 a.m.32 views

SQL Injection

sylius/grid-bundle is vulnerable to SQL Injection attacks. The library directly passes the values added at the end of query sorting to the database, allowing a malicious user to inject and execute arbitrary SQL queries on the system...

9.8CVSS4.2AI score0.0137EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder