Lucene search
+L

13269 matches found

OSV
OSV
added 2017/08/29 1:35 a.m.18 views

CVE-2017-10842

SQL injection vulnerability in the baserCMS 3.0.14 and earlier, 4.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS8.7AI score
SaveExploits0References2
NVD
NVD
added 2017/08/29 1:35 a.m.13 views

CVE-2017-10839

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

8.8CVSS8.9AI score0.01071EPSS
SaveExploits0References1
Prion
Prion
added 2017/08/29 1:35 a.m.13 views

Sql injection

SQL injection vulnerability in the SEO Panel prior to version 3.11.0 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.9AI score0.01071EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2017/08/24 9:29 p.m.26 views

Sql injection

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the 1 order or 2 "by" parameter to admin/orion.extfeedbackformefbfforms.php...

6.5CVSS8.8AI score0.01741EPSS
SaveExploits2References2Affected Software1
NVD
NVD
added 2017/08/24 9:29 p.m.27 views

CVE-2015-8355

Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the 1 order or 2 "by" parameter to admin/orion.extfeedbackformefbfforms.php...

8.8CVSS9.1AI score0.01741EPSS
SaveExploits2References2
NVD
NVD
added 2017/08/18 5:29 p.m.22 views

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

9.8CVSS10AI score0.01428EPSS
SaveExploits1References2
Prion
Prion
added 2017/08/18 5:29 p.m.21 views

Sql injection

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

7.5CVSS9.9AI score0.01428EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2017/08/18 5:0 p.m.37 views

CVE-2017-12776

SQL injection vulnerability in reports.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the delreport parameter...

10AI score0.01428EPSS
SaveExploits1References2
Prion
Prion
added 2017/08/17 8:29 p.m.21 views

Sql injection

SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr parameter...

7.5CVSS9.9AI score0.01288EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2017/08/17 8:29 p.m.19 views

Sql injection

SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid parameter...

7.5CVSS9.9AI score0.01364EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2017/08/17 8:29 p.m.24 views

CVE-2017-12910

SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter...

9.8CVSS10AI score0.01336EPSS
SaveExploits1References1
CVE
CVE
added 2017/08/17 8:0 p.m.65 views

CVE-2017-12908

NexusPHP 1.5 is affected by a SQL injection in takeconfirm.php via the conusr parameter. The root cause is an unsafe handling of input that allows remote attackers to execute arbitrary SQL commands. The CVE description and multiple connected sources confirm this vulnerability; however, the provid...

9.8CVSS9.9AI score0.01288EPSS
SaveExploits1References1Affected Software1
exploitpack
exploitpack
added 2017/08/10 12:0 a.m.80 views

Red-Gate SQL Monitor 3.10 4.2 - Authentication Bypass

Red-Gate SQL Monitor 3.10 4.2 - Authentication Bypass Exploit Title: Red-Gate SQL Monitor authentication bypass Version: Redgate SQL Monitor before 3.10 and 4.x before 4.2 Date: 2017-08-10 Red-Gate made a security announcement and publicly released the fixed version more than two years before thi...

10CVSS0.6AI score0.14074EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2017/08/10 12:0 a.m.76 views

Red-Gate SQL Monitor < 3.10 / 4.2 - Authentication Bypass

Exploit Title: Red-Gate SQL Monitor authentication bypass Version: Redgate SQL Monitor before 3.10 and 4.x before 4.2 Date: 2017-08-10 Red-Gate made a security announcement and publicly released the fixed version more than two years before this exploit was published Vendor Advisory:...

10CVSS8.4AI score0.14074EPSS
SaveExploits4
zdt
zdt
added 2017/08/10 12:0 a.m.82 views

Red-Gate SQL Monitor < 3.10/4.2 - Authentication Bypass Vulnerability

Exploit for windows platform in category web applications Exploit Title: Red-Gate SQL Monitor authentication bypass Version: Redgate SQL Monitor before 3.10 and 4.x before 4.2 Date: 2017-08-10 Red-Gate made a security announcement and publicly released the fixed version more than two years before...

10CVSS9.7AI score0.14074EPSS
SaveExploits4
NVD
NVD
added 2017/08/09 6:29 p.m.23 views

CVE-2015-0782

SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management ZCM allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS9.9AI score0.0708EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2017/08/04 4:0 p.m.27 views

CVE-2017-10816

SQL injection vulnerability in the MaLion for Windows and Mac 5.0.0 to 5.2.1 allows remote attackers to execute arbitrary SQL commands via Relay Service Server...

10AI score0.02206EPSS
SaveExploits0References2
Prion
Prion
added 2017/08/02 2:29 p.m.15 views

Sql injection

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

7.5CVSS9.9AI score0.03746EPSS
SaveExploits4References3Affected Software1
NVD
NVD
added 2017/08/02 2:29 p.m.15 views

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

9.8CVSS9.9AI score0.03746EPSS
SaveExploits4References3
Cvelist
Cvelist
added 2017/08/02 2:0 p.m.25 views

CVE-2017-11494

SQL injection vulnerability in SOL.Connect ISET-mpp meter 1.2.4.2 and earlier allows remote attackers to execute arbitrary SQL commands via the user parameter in a login action...

10AI score0.03746EPSS
SaveExploits4References3
Rows per page
Query Builder