Lucene search
K

1285 matches found

ATTACKERKB
ATTACKERKB
added 2022/03/22 7:15 p.m.4 views

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

9.8CVSS5.9AI score0.00359EPSS
Exploits1References3
Prion
Prion
added 2022/03/22 7:15 p.m.11 views

Sql injection

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java...

7.5CVSS9.8AI score0.00359EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/22 12:0 a.m.4 views

PT-2022-17346 · Unknown · Mybatis Plus

Name of the Vulnerable Software and Affected Versions: MyBatis plus version 3.4.3 Description: The issue concerns a SQL injection vulnerability via the Column parameter in the /core/conditions/AbstractWrapper.java file. It is noted that the vendor considers the reported execution of a SQL stateme...

9.8CVSS7.5AI score0.00359EPSS
Exploits1References8
Vulnrichment
Vulnrichment
added 2022/03/22 12:0 a.m.12 views

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

8.3AI score0.00359EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/03/22 12:0 a.m.15 views

CVE-2022-25517

MyBatis plus v3.4.3 was discovered to contain a SQL injection vulnerability via the Column parameter in /core/conditions/AbstractWrapper.java. NOTE: the vendor's position is that the reported execution of a SQL statement was intended behavior...

10AI score0.00359EPSS
Exploits1References2
OSV
OSV
added 2022/03/15 5:15 p.m.2 views

CVE-2022-27196

Jenkins Favorite Plugin 2.4.0 and earlier does not escape the names of jobs in the favorite column, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure or Item/Create permissions...

5.4CVSS6AI score
Exploits0References2
OSV
OSV
added 2022/02/10 11:15 p.m.14 views

CVE-2021-44969

Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...

4.8CVSS6.1AI score
Exploits0References1
NVD
NVD
added 2022/02/10 11:15 p.m.13 views

CVE-2021-44969

Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...

4.8CVSS0.00219EPSS
Exploits1References1
Prion
Prion
added 2022/02/10 11:15 p.m.14 views

Cross site scripting

Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...

3.5CVSS5AI score0.00219EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/02/10 10:39 p.m.92 views

CVE-2021-44969

CVE-2021-44969 affects Taocms v3.0.2, with an XSS vulnerability in the Management Column component. Connected sources indicate the root cause as insufficient validation of client-side data, enabling potential execution of client-side code. No exploitation details or patches are provided in the su...

4.8CVSS5AI score0.00219EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/02/10 10:39 p.m.13 views

CVE-2021-44969

Taocms v3.0.2 was discovered to contain a cross-site scripting XSS vulnerability via the Management Column component...

5.2AI score0.00219EPSS
Exploits1References1
OSV
OSV
added 2021/12/22 11:15 p.m.1 views

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

5.4CVSS5.7AI score0.00291EPSS
Exploits1References1
CVE
CVE
added 2021/12/22 10:41 p.m.50 views

CVE-2020-20600

CVE-2020-20600 affects MetInfo 7.0 beta. The vulnerability is a stored cross-site scripting (XSS) in the $name parameter of admin/?n=column&c=index&a=doAddColumn. This is confirmed across multiple feeds (NVD, RH, CVE lists) and is tied to MetInfo 7.0 beta with the vulnerability location in the sp...

5.4CVSS5.2AI score0.00291EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/22 10:41 p.m.16 views

CVE-2020-20600

MetInfo 7.0 beta contains a stored cross-site scripting XSS vulnerability in the $name parameter of admin/?n=column&c=index&a=doAddColumn...

5.3AI score0.00291EPSS
Exploits1References1
CVE
CVE
added 2021/12/15 10:18 p.m.37 views

CVE-2021-45017

Catfish CMS CSRF in

8.8CVSS8.9AI score0.00122EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2021/12/02 11:15 p.m.2 views

CVE-2021-25785

Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...

4.8CVSS5.7AI score0.00235EPSS
Exploits1References1
NVD
NVD
added 2021/12/02 11:15 p.m.8 views

CVE-2021-25785

Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...

4.8CVSS0.00235EPSS
Exploits1References1
Prion
Prion
added 2021/12/02 11:15 p.m.16 views

Cross site scripting

Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...

3.5CVSS5AI score0.00235EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/02 10:21 p.m.11 views

CVE-2021-25785

Taocms v2.5Beta5 was discovered to contain a cross-site scripting XSS vulnerability via the component Management column...

5.2AI score0.00235EPSS
Exploits1References1
Prion
Prion
added 2021/11/05 4:15 p.m.23 views

Cross site scripting

Multiple Cross Site Scripting XSS vulnerabilities exits in SEO Panel v4.8.0 via the 1 totime parameter in a backlinks.php, b analytics.php, c log.php, d overview.php, e pagespeed.php, f rank.php, g review.php, h saturationchecker.php, i socialmedia.php, and j reports.php; the 2 fromtime parameter...

4.3CVSS6.2AI score0.0023EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder