Lucene search
+L

4525 matches found

CNVD
CNVD
•added 2021/02/05 12:00 a.m.•10 views

SQL injection vulnerability in pr***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/05 12:00 a.m.•11 views

SQL injection vulnerability in ne***.php page of website building system of Guangzhou Chuangke Network Technology Co.

Guangzhou Chuangke Network Technology Co., Ltd. is a business service company that provides customers with marketing website construction, network marketing promotion, website hosting operation, website production, website design, website promotion and maintenance, website SEO optimization, WeCha...

7.5AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/02/05 12:00 a.m.•18 views

RockOA SQL注入漏洞

RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wordModel.php parameters in the user input is not effectively filtered , a remote attacker through the injection of SQL statements to execute the acquisition...

9.8CVSS7.5AI score0.01317EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/02/05 12:00 a.m.•7 views

SQL injection vulnerability in website builder system ne***.aspx page of Hangzhou Orange Promise Technology Co.

Hangzhou Orange Promise Technology Co., Ltd. is a company specializing in Internet branding and Internet marketing. Hangzhou Orange Promise Technology Co., Ltd. station building system ne.aspx page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/04 12:00 a.m.•9 views

SQL injection vulnerability in pr***.asp page of website building system of Ruian UB Technology Co.

Ltd. is a social public to provide web design and production, Baidu / Google SEO optimization and promotion, cell phone website, WeChat public platform, foreign trade monitoring enterprise mailboxes and other network information consulting services, product albums catalogs, corporate CD-ROM desig...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2021/02/01 12:00 a.m.•4 views

SQL injection vulnerability in SeaCMS backend (CNVD-2021-14497)

SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. A SQL injection vulnerability exists in the backend of SeaCMS. An attacker can exploit this vulnerability to obtain sensitive information from the database...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/28 12:00 a.m.•8 views

SQL Injection Vulnerability in wise on-demand Server

wise on-demand server software is server-side distribution software that provides streaming playback of audio and video files. A SQL injection vulnerability exists in the sewise on-demand server, which can be exploited by an attacker to obtain sensitive information from the database...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/28 12:00 a.m.•11 views

SQL Injection Vulnerabilities in the Website Building System of Shenyang Uno Network Technology Co.

Shenyang Uno Network Technology Co., Ltd. mainly provides website production and host maintenance, domain name registration services and network marketing and promotion programs. Shenyang Uno Network Technology Co., Ltd. website building system there is a SQL injection vulnerability, attackers ca...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•19 views

Bosch FSM-2500 server 和 Bosch FSM-5000 server 信任管理问题漏洞

Bosch FSM-2500 and Bosch FSM-5000 are both panel-ready fire control systems from Bosch of Germany. Bosch FSM-2500 and Bosch FSM-5000 suffer from a hard-coded vulnerability that could be exploited by remote attackers to submit special requests to gain unauthorized access to the database system wit...

10CVSS7.3AI score0.03696EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/01/26 12:00 a.m.•10 views

SQL Injection Vulnerability in UFIDA U8-OA (CNVD-2021-12781)

Founded in 1988, UFIDA is a leading global provider of cloud services and software for enterprises and public organizations. A SQL injection vulnerability exists in UFIDA U8-OA. An attacker can exploit the vulnerability to gain access to sensitive database information...

8.1AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•9 views

SQL Injection Vulnerability in ZDNT's Customer Resource Management System (CNVD-2021-10558)

ZDNT Customer Resource Management System is a foreign trade management and foreign trade customer management and other functions of the software. There is a SQL injection vulnerability in ZJUENT Customer Resource Management System, which can be exploited by attackers to obtain sensitive informati...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•14 views

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10553)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2021/01/21 12:00 a.m.•17 views

SQL Injection Vulnerability in Office Fly of Zhejiang Eagle Software Co. Ltd (CNVD-2021-10555)

Ltd. ZheJiang Eagle Soft Co., LTD was established in November 2004, the company adhere to the "focus, professional" business philosophy for enterprises, administrative institutions to provide information technology solutions and software services. The company adheres to the business philosophy of...

7.5AI score
SaveExploits0
NCSC
NCSC
•added 2021/01/21 12:00 a.m.•21 views

Vulnerabilities fixed in Cisco Unified Communications

Cisco has fixed multiple vulnerabilities in several Unified Communications products. An authenticated malicious person remote can exploit the vulnerabilities to gain access data on the underlying file system or in the underlying database. This includes hashed passwords stored in this database...

6.5CVSS6.9AI score0.01368EPSS
SaveExploits0
NVD
NVD
•added 2021/01/19 10:15 a.m.•27 views

CVE-2021-22850

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

9.8CVSS6.3AI score0.01002EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/01/19 8:53 a.m.•12 views

CVE-2021-22850

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

9.8CVSS7.2AI score0.01002EPSS
SaveExploits0References3Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/19 12:00 a.m.•8 views

CVE-2021-22850: Incorrect Permission Assignment for Critical Resource

HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions...

9.8CVSS5.8AI score0.01002EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/01/19 12:00 a.m.•21 views

HGiga EIP Access Control Error Vulnerability

Hgiga HGiga EIP is a product of China Hengji Hgiga Corporation. An Access Control Error vulnerability exists in the HGiga EIP product, which stems from a lack of invalid access control on certain pages and can be exploited by an attacker to access a database or perform privileged functions...

9.8CVSS5.8AI score0.01002EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/01/19 12:00 a.m.•18 views

PT-2021-15223 · Hgiga Eip · Hgiga Eip

Name of the Vulnerable Software and Affected Versions: HGiga EIP product affected versions not specified Description: The issue is related to ineffective access control in certain pages of the HGiga EIP product, allowing attackers to access the database or perform privileged functions...

9.8CVSS9.1AI score0.01002EPSS
SaveExploits0References4
CNVD
CNVD
•added 2021/01/19 12:00 a.m.•8 views

SQL Injection Vulnerability in T_Pr***.aspx Page of KTO's Fully Intelligent Parking Video Charging System

Xiamen Corto Communication Technology Co., Ltd Corto Parking is a professional intelligent parking value operator, providing intelligent parking services to customers. A SQL injection vulnerability exists in the TPr.aspx page of KETOP's fully intelligent parking video charging system. Attackers c...

7.4AI score
SaveExploits0
Rows per page
Query Builder