Lucene search
+L

13422 matches found

Vulnrichment
Vulnrichment
•added 2024/02/28 12:00 a.m.•14 views

CVE-2024-25351

SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid parameter...

8.3AI score0.0039EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/28 12:00 a.m.•7 views

CVE-2024-25351: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in /zms/admin/changeimage.php in PHPGurukul Zoo Management System 1.0 allows attackers to run arbitrary SQL commands via the editid parameter...

3.8CVSS6AI score0.0039EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•9 views

CVE-2024-24027: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Likeshop before 2.5.7 allows attackers to run abitrary SQL commands via the function DistributionMemberLogic::getFansLists...

7.2CVSS5.8AI score0.00668EPSS
SaveExploits1References2
Prion
Prion
•added 2024/02/26 10:15 p.m.•32 views

Sql injection

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

8.9AI score0.00628EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/26 12:00 a.m.•44 views

CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

8.2AI score0.00628EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/26 12:00 a.m.•22 views

CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

8.3AI score0.00628EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/21 12:00 a.m.•21 views

CVE-2023-51828

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...

10AI score0.00947EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/21 12:00 a.m.•8 views

CVE-2023-51828: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...

9.8CVSS6.3AI score0.00947EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/02/21 12:00 a.m.•39 views

CVE-2023-52153

A SQL Injection vulnerability in /pmb/opaccss/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value...

8.3AI score0.00821EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/21 12:00 a.m.•4 views

CVE-2023-52155: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability in /admin/sauvegarde/run.php in PMB 7.4.7 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via the sauvegardes variable through the /admin/sauvegarde/run.php endpoint...

7.2CVSS6.4AI score0.00722EPSS
SaveExploits1References2
Mend
Mend
•added 2024/02/21 12:00 a.m.•10 views

CVE-2023-51828

A SQL Injection vulnerability in /admin/convert/export.class.php in PMB 7.4.7 and earlier versions allows remote unauthenticated attackers to execute arbitrary SQL commands via the query parameter in getnextnotice function...

9.8CVSS0.00947EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/02/12 12:00 a.m.•10 views

CVE-2024-23763

SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiersattribute parameter...

9.9AI score0.00629EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/02/12 12:00 a.m.•39 views

CVE-2024-23763

SQL Injection vulnerability in Gambio through 4.9.2.0 allows attackers to run arbitrary SQL commands via crafted GET request using modifiersattribute parameter...

10AI score0.00629EPSS
SaveExploits1References1
NVD
NVD
•added 2024/01/31 9:15 p.m.•42 views

CVE-2022-47072

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...

9.8CVSS9.8AI score0.00629EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/31 9:15 p.m.•35 views

Sql injection

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...

7.5CVSS8.7AI score0.00629EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/31 12:00 a.m.•11 views

CVE-2022-47072

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...

9.9AI score0.00629EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/31 12:00 a.m.•8 views

CVE-2022-47072: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Enterprise Architect 16.0.1605 32-bit allows attackers to run arbitrary SQL commands via the Find parameter in the Select Classifier dialog box...

9.8CVSS6AI score0.00629EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/20 7:15 p.m.•42 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS0.0078EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/12/20 12:00 a.m.•21 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.9AI score0.0078EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/20 12:00 a.m.•8 views

CVE-2023-47990: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS8.3AI score0.0078EPSS
SaveExploits1References3
Rows per page
Query Builder