Lucene search
+L

15258 matches found

Cvelist
Cvelist
•added 2017/01/12 6:06 a.m.•50 views

CVE-2017-5345

SQL injection vulnerability in inc/lib/Control/Ajax/tags-ajax.control.php in GeniXCMS 0.0.8 allows remote authenticated editors to execute arbitrary SQL commands via the term parameter to the default URI...

8.9AI score0.01552EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•8 views

PT-2017-16447

Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated administrators to execute arbitrary SQL commands. This is achieved via the id parameter to the "gxadmin/index.php" endpoint. Recommendations For GeniXCMS version 0.0.8,...

7.2CVSS0.01648EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2017/01/12 12:00 a.m.•7 views

PT-2017-16446

Name of the Vulnerable Software and Affected Versions GeniXCMS version 0.0.8 Description The issue allows remote authenticated editors to execute arbitrary SQL commands. This is achieved by exploiting the term parameter in the default URI, specifically in the...

8.8CVSS0.01552EPSS
SaveExploits1References5
Prion
Prion
•added 2017/01/04 2:59 a.m.•23 views

Sql injection

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch...

7.5CVSS9AI score0.02446EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2017/01/04 2:00 a.m.•38 views

CVE-2016-10114

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch...

9.9AI score0.02446EPSS
SaveExploits0References4
Prion
Prion
•added 2017/01/01 7:59 p.m.•23 views

Sql injection

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

7.5CVSS9.1AI score0.01623EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2017/01/01 7:00 p.m.•50 views

CVE-2016-10096

SQL injection vulnerability in register.php in GeniXCMS before 1.0.0 allows remote attackers to execute arbitrary SQL commands via the activation parameter...

7.8AI score0.01623EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2016/12/29 12:00 a.m.•9 views

PT-2019-5829

Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL structure manipulation in the app/admin/custom-fields/filter.php component of the phpIPAM web application. This can be exploited by a remote attacker to...

9.8CVSS0.01881EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2016/12/29 12:00 a.m.•7 views

PT-2019-5828

Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/edit-result.php component of the phpIPAM web application. This can be exploited by a remote...

9.8CVSS0.99714EPSS
SaveExploits60References12
Positive Technologies
Positive Technologies
•added 2016/12/29 12:00 a.m.•12 views

PT-2019-5826

Name of the Vulnerable Software and Affected Versions phpIPAM version 1.4 Description The issue is related to a lack of protection against SQL query structure manipulation in the app/admin/custom-fields/filter-result.php component of the phpIPAM web application. This can be exploited by a remote...

9.8CVSS0.10318EPSS
SaveExploits6References20
CNVD
CNVD
•added 2016/12/27 12:00 a.m.•12 views

phpMyAdmin SQL Injection Vulnerability (CNVD-2016-13237)

phpMyAdmin is a free, web-based MySQL database management tool developed by the phpMyAdmin team. A SQL injection vulnerability exists in phpMyAdmin. An attacker can exploit this vulnerability to execute arbitrary SQL commands...

8.8CVSS8.3AI score0.01481EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2016/12/13 12:00 a.m.•58 views

Joomla! Component DT Register - 'cat' SQL Injection

Title: SQL injection in Joomla extension DT Register Credit: Elar Lang / https://security.elarlang.eu Vulnerability: SQL injection Vulnerable version: before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 CVE: pending Full Disclosure URL:...

5.3AI score
SaveExploits0
CNVD
CNVD
•added 2016/12/02 12:00 a.m.•17 views

IBM BigFix Remote Control SQL Injection Vulnerability

IBM BigFix Remote Control is a set of remote control systems from IBM in the United States. A SQL injection vulnerability exists in IBM BigFix Remote Control 9.1.2 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary SQL commands...

6.5CVSS8.4AI score0.01091EPSS
SaveExploits0References1
NVD
NVD
•added 2016/11/30 6:59 p.m.•46 views

CVE-2016-2873

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.8CVSS8.7AI score0.01119EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2016/11/30 6:59 p.m.•23 views

CVE-2016-2873

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.8CVSS6.1AI score0.01119EPSS
SaveExploits0References2
Prion
Prion
•added 2016/11/30 6:59 p.m.•33 views

Sql injection

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS8.3AI score0.01119EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2016/11/30 12:00 a.m.•4 views

PT-2016-5296

Name of the Vulnerable Software and Affected Versions IBM BigFix Remote Control versions prior to 9.1.3 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions prior to 9.1.3, update to version 9.1.3 or later to resolve t...

6.5CVSS0.01091EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/30 12:00 a.m.•10 views

CVE-2016-2873: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

8.8CVSS6.4AI score0.01119EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/11/30 12:00 a.m.•10 views

CVE-2016-2950: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in IBM BigFix Remote Control before 9.1.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

6.5CVSS6.4AI score0.01091EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2016/11/30 12:00 a.m.•5 views

PT-2016-5259

Name of the Vulnerable Software and Affected Versions IBM QRadar SIEM versions 7.1 before MR2 Patch 13 IBM QRadar SIEM versions 7.2 before 7.2.7 Description A SQL injection issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For IBM QRadar SIEM version 7.1,...

8.8CVSS0.01119EPSS
SaveExploits0References4
Rows per page
Query Builder