Lucene search
+L

235 matches found

CNNVD
CNNVD
added 2025/11/28 12:0 a.m.7 views

Uniong WebITR SQL注入漏洞

Uniong WebITR is an online time and attendance system from China Kaifa Uniong. Uniong WebITR suffers from a SQL injection vulnerability that originates from SQL injection, which allows remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8.1AI score0.00289EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/11/28 12:0 a.m.6 views

PT-2025-48321

Name of the Vulnerable Software and Affected Versions WebITR versions affected versions not specified Description WebITR, developed by Uniong, contains a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL commands, potentially allowing them to read database contents. The...

7.1CVSS7.9AI score0.00289EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/11/28 12:0 a.m.9 views

PT-2025-48320

Name of the Vulnerable Software and Affected Versions WebITR versions affected versions not specified Description WebITR developed by Uniong has a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL commands, potentially allowing them to read database contents. The...

7.1CVSS7.5AI score0.00289EPSS
Exploits0References8
EUVD
EUVD
added 2025/11/14 9:30 p.m.5 views

EUVD-2025-197645

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents including schema and credential hashes via an unauthenticated HTTP GET request to /obs/database/obsdb.sql...

7.5CVSS6.1AI score0.00438EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/11/14 12:0 a.m.6 views

CVE-2025-63891

Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents including schema and credential hashes via an unauthenticated HTTP GET request to /obs/database/obsdb.sql...

6.2AI score0.00438EPSS
Exploits1References2
RedhatCVE
RedhatCVE
added 2025/11/13 9:8 a.m.6 views

CVE-2025-13047

Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS8.2AI score0.00064EPSS
Exploits0References1
NVD
NVD
added 2025/11/12 8:15 a.m.5 views

CVE-2025-13047

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00064EPSS
Exploits0
EUVD
EUVD
added 2025/11/12 7:59 a.m.5 views

EUVD-2025-119986

Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...

8.7CVSS7.8AI score0.00064EPSS
Exploits0References3
CVE
CVE
added 2025/11/12 7:59 a.m.11 views

CVE-2025-13047

CVE-2025-13047 affects the ViewLead Technology Bacteriology Laboratory Reporting System. The vulnerability is a SQL Injection that allows unauthenticated remote attackers to inject arbitrary SQL and read database contents. Root cause and exact vulnerable component are described as an injection fl...

7.9AI score0.00064EPSS
Exploits0
CVE
CVE
added 2025/11/12 7:57 a.m.13 views

CVE-2025-13046

The CVE-2025-13046 entry is linked to a SQL Injection vulnerability in ViewLead Technology’s Bacteriology Laboratory Reporting System. Unauthenticated remote attackers can inject arbitrary SQL commands to read database contents. Multiple connected sources confirm the affected product and the impa...

7.9AI score0.00064EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2025/11/12 12:0 a.m.7 views

PT-2025-46577

Name of the Vulnerable Software and Affected Versions ViewLead Technology Bacteriology Laboratory Reporting System affected versions not specified Description The Bacteriology Laboratory Reporting System allows unauthenticated remote attackers to inject arbitrary SQL commands, potentially enablin...

8.7CVSS7.5AI score0.00064EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/11/10 2:19 a.m.4 views

CVE-2025-12865 e-Excellence|U-Office Force - SQL Injection

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS7.8AI score0.00351EPSS
Exploits0References2
EUVD
EUVD
added 2025/11/10 2:19 a.m.9 views

EUVD-2025-38732

U-Office Force developed by e-Excellence has a SQL Injection vulnerability, allowing authenticated remote attacker to inject arbitrary SQL commands to read, modify, and delete database contents...

8.8CVSS7.6AI score0.00351EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/11/04 7:5 a.m.6 views

CVE-2025-12503

EasyFlow .NET and EasyFlow AiNet developed by Digiwin has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...

7.1CVSS8.1AI score0.00317EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.8 views

PT-2025-44752

Name of the Vulnerable Software and Affected Versions EasyFlow .NET and EasyFlow AiNet developed by Digiwin affected versions not specified Description EasyFlow .NET and EasyFlow AiNet developed by Digiwin contains a SQL Injection issue. Authenticated remote attackers can inject arbitrary SQL...

7.1CVSS7.9AI score0.00317EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-29728

Malware in sbrugna...

7.5CVSS7.5AI score0.01454EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2024-54090

Malicious code in bioql PyPI...

8.7CVSS6.6AI score0.00349EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-30897

Malicious code in bioql PyPI...

10CVSS9.4AI score0.01172EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-31217

Malicious code in bioql PyPI...

10CVSS9.4AI score0.01172EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2022-24694

Malicious code in bioql PyPI...

10CVSS9.4AI score0.01172EPSS
Exploits0References1
Rows per page
Query Builder