Lucene search
+L

10209 matches found

CNNVD
CNNVD
added 2022/06/29 12:00 a.m.8 views

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

7.2CVSS5.9AI score0.00929EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.28 views

Advantech iView SQL注入漏洞

Advantech Iview is a Simple Network Protocol SNMP based software from Advantech, China, for managing B B SmartWorx devices. information...

8.1CVSS5.4AI score0.00848EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/06/28 12:00 a.m.48 views

GLPI SQL注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, even toner cartridges a...

9.8CVSS6.1AI score0.0882EPSS
SaveExploits3References5
Positive Technologies
Positive Technologies
added 2022/06/27 12:00 a.m.21 views

PT-2022-15268 · Sourcecodester · Sourcecodester Library Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Library Management System version 1.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /librarian/bookdetails.php. The issue can be exploited through SQL injection by manipulatin...

8.8CVSS8.9AI score0.01094EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/06/24 2:15 a.m.6 views

CVE-2022-32405

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...

8.8CVSS7.4AI score0.01225EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/24 2:15 a.m.7 views

CVE-2022-32401

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...

8.8CVSS5.8AI score0.01225EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/24 12:00 a.m.7 views

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the application /pms/admin/prisons/viewprison.php The vulnerability is caused by the lack of SQL data filter escape ...

8.8CVSS6.1AI score0.01225EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/24 12:00 a.m.9 views

Prison Management System SQL注入漏洞

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/cells/managecell.php in the id parameter in /pms/admin/cells/managecell.php is missing the S...

8.8CVSS6.1AI score0.01225EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/06/23 5:15 p.m.6 views

CVE-2022-33114

Jfinal CMS v5.1.0 was discovered to contain a SQL injection vulnerability via the attrVal parameter at /jfinalcms/system/dict/list...

7.2CVSS5.8AI score0.00953EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/23 12:00 a.m.15 views

LaikeTui SQL注入漏洞

LaikeTui Laike e-commerce is a stable and small open source mall system for individual developers. A security vulnerability exists in LaikeTui v3.5.0. Attackers use this vulnerability through the menu management function in the background of the SQL injection attack , in order to obtain sensitive...

7.5CVSS7.5AI score0.01081EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/21 2:15 p.m.4 views

CVE-2022-33056

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/21 12:00 a.m.10 views

PHP Matrimonial Script Hindu Matrimonial Script SQL注入漏洞

A security vulnerability exists in Hindu Matrimonial Script, an online marriage service website of PHP Matrimonial Script India, which can be exploited by attackers to perform SQL injection attacks...

9.8CVSS5.9AI score0.01126EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/06/21 12:00 a.m.10 views

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/20 11:15 a.m.8 views

CVE-2022-1905

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

9.8CVSS5.8AI score0.37873EPSS
SaveExploits2References1
OSV
OSV
added 2022/06/17 2:15 p.m.9 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS5.8AI score0.01048EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/17 2:15 p.m.12 views

CVE-2022-31357

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via /ordering/admin/inventory/index.php?view=edit&id=...

9.8CVSS7.4AI score0.01048EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/17 12:00 a.m.8 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

8.8CVSS5.9AI score0.00928EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/17 12:00 a.m.8 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by attackers to perform SQL injection attacks via the id parameter in /admin/deluser.php...

7.2CVSS5.9AI score0.00915EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/17 12:00 a.m.9 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /admin/showbad.php...

7.2CVSS5.9AI score0.00915EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/16 7:15 p.m.9 views

CVE-2020-35597

Victor CMS 1.0 is vulnerable to SQL injection via cid parameter of admineditcomment.php, pid parameter of admineditpost.php, uid parameter of adminedituser.php, and edit parameter of adminupdatecategories.php...

8.8CVSS5.8AI score0.01474EPSS
SaveExploits1References3
Rows per page
Query Builder