Lucene search
+L

1842 matches found

CNVD
CNVD
added 2021/08/22 12:0 a.m.12 views

SQL Injection Vulnerability in Smart Gas System of New Day Technology Co.

Founded in 2000, Xintian Technology Co. It is a benchmark enterprise in China's electronic information industry. With the core competitiveness of "mastering core technology and continuous innovation", we continue to provide competitive products and intelligent solutions to realize energy saving,...

7.5AI score
SaveExploits0
NVD
NVD
added 2021/08/18 6:15 p.m.19 views

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

7.5CVSS0.01254EPSS
SaveExploits1References1
Prion
Prion
added 2021/08/18 6:15 p.m.19 views

Sql injection

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

5CVSS7.6AI score0.01254EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/08/18 5:54 p.m.24 views

CVE-2020-22122

A SQL injection vulnerability in /oa.php?c=Staff&a=read of Find a Place LJCMS v 1.3 allows attackers to access sensitive database information via a crafted POST request...

7.6AI score0.01254EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/18 12:0 a.m.32 views

HealthNode Hospital Management System SQL Injection Vulnerability

HealthNode Hospital Management System is a hospital management system. The system includes functions such as patient information management, ward management, surgery schedule management and financial management. HealthNode Hospital Management System suffers from a SQL injection vulnerability, whi...

9.8CVSS9.5AI score0.01778EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/16 12:0 a.m.41 views

Nagios XI SQL Injection Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting, and rich data visualization.A SQL injection vulnerability exists in the Bulk Modification Tool in versions of Nagios XI prior to 5.8.5. The vulnerability stems fr...

9.8CVSS2.1AI score0.7925EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/12 3:15 p.m.20 views

CVE-2020-20981

A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information...

7.5CVSS0.0135EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/08/12 2:49 p.m.25 views

CVE-2020-20981

A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information...

7.9AI score0.0135EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/10 12:0 a.m.16 views

SQL Injection Vulnerability in Smart Meter Integrated Management System of Xintian Technology Co.

Xintian Technology Co., Ltd. is a professional manufacturer and supplier of water meters, energy meters and gas meters. A SQL injection vulnerability exists in the Smart Meter Integrated Management System of Xintian Technology Corporation, which can be exploited by attackers to obtain sensitive...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/08/10 12:0 a.m.30 views

rConfig SQL Injection Vulnerability (CNVD-2021-61756)

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 is vulnerable to a SQL injection vulnerability that stems from an unvalidated dbName parameter in ajaxDbInstall.php, which can be exploited by attackers to access sensitive database information...

7.5CVSS3.5AI score0.01353EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/10 12:0 a.m.23 views

rConfig SQL Injection Vulnerability (CNVD-2021-61757)

rConfig is an open source network device configuration management utility. rConfig version 3.9.5 contains a SQL injection vulnerability in config.inc.php, which can be exploited by sending a specially crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php to access sensitive database...

7.5CVSS3AI score0.01558EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/08/09 10:54 p.m.30 views

CVE-2020-23150

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php...

8.1AI score0.01558EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/08/09 10:54 p.m.24 views

CVE-2020-23149

The dbName parameter in ajaxDbInstall.php of rConfig 3.9.5 is unsanitized, allowing attackers to perform a SQL injection and access sensitive database information...

8.4AI score0.01353EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/09 12:0 a.m.26 views

Jeecg-boot CMS SQL Injection Vulnerability

Jeecg-Boot is a code generator-based intelligent development platform. jeecg-boot CMS version 2.3 of /jeecg boot/sys/dict/loadtreedata is vulnerable to SQL injection, which can be exploited by attackers to access sensitive database information...

7.5CVSS4AI score0.01554EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/06 11:15 p.m.16 views

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

7.5CVSS7.7AI score
SaveExploits0References1
Cvelist
Cvelist
added 2021/08/06 10:38 p.m.27 views

CVE-2020-28087

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

7.8AI score0.01554EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/08/05 12:0 a.m.51 views

WordPress Secure Copy Content Protection Plugin SQL Injection Vulnerability

WordPress is a blogging platform developed by the Wordpress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Secure Copy Content Protection plugin is an application plugin for WordPress. A SQL injection vulnerability exists in...

7.2CVSS7AI score0.01344EPSS
SaveExploits2References1
NVD
NVD
added 2021/07/23 2:15 p.m.17 views

CVE-2021-25201

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information...

7.5CVSS0.01535EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/23 2:15 p.m.13 views

Sql injection

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information...

5CVSS8AI score0.01535EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/23 1:31 p.m.22 views

CVE-2021-25201

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information...

8.2AI score0.01535EPSS
SaveExploits1References1
Rows per page
Query Builder