Lucene search
+L

10211 matches found

CNVD
CNVD
added 2018/12/09 12:00 a.m.7 views

SQL injection vulnerability in Laoban CMS V2.0 ca***.php page

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. A SQL injection vulnerability exists in the Laoban CMS V2.0ca.php page. An attacker can exploit this vulnerability to obtain sensitiv...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2018/12/08 12:00 a.m.5 views

SQL Injection Vulnerability in Chihuahua Software F22 Apparel Management Software

Guangzhou Zhihua Software Technology Co., Ltd. is a high-tech enterprise specializing in providing information technology solutions for brand-name apparel, shoes and bags enterprises. A SQL injection vulnerability exists in Chihuahua Software F22 Apparel Management Software. An attacker can explo...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2018/12/07 12:00 a.m.10 views

SQL injection vulnerability in ESPCMS P8 frontend Me***.php file

ESPCMS is an enterprise website management system built on LAMP development. A SQL injection vulnerability exists in the ESPCMS P8 frontend Me.php file. An attacker can use this vulnerability to obtain sensitive information from the database...

7.7AI score
SaveExploits0
OSV
OSV
added 2018/12/06 3:29 a.m.7 views

CVE-2018-19893

SearchController.php in PbootCMS 1.2.1 has SQL injection via the index.php/Search/index.html query string...

9.8CVSS5.8AI score0.01135EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/06 12:00 a.m.9 views

anmi V1.1.0 SQL Injection Vulnerability in Foreground Us***.php File

Anmi program is a program that focuses on H5 mobile website/app construction. anmi V1.1.0 A SQL injection vulnerability exists in the front-end Us.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2018/12/06 12:00 a.m.6 views

SQL Injection Vulnerability in Frontend Vo*** Routing File of Dandelion Online Teaching System

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
CNVD
CNVD
added 2018/12/06 12:00 a.m.5 views

ThinkCMF SQL Injection Vulnerability (CNVD-2019-07960)

ThinkCMF is a Chinese content management framework based on PHP+MYSQL. An SQL injection vulnerability exists in the editpost function in NavController.class.php in ThinkCMF X2.2.2, which can be exploited by users with administrator privileges to perform SQL injection attacks via the parentid...

7.2CVSS8.1AI score0.01326EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/12/06 12:00 a.m.7 views

SQL injection vulnerability in frontend we*** routing file of Dandelion online teaching system

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
CNVD
CNVD
added 2018/12/05 12:00 a.m.6 views

SQL Injection Vulnerability in HuCart Backend aj***_ar***.php Page

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the background ajar.php page there is a SQL injection vulnerability , remote attackers can exploit the vulnerability to obtain sensitive database information...

7.7AI score
SaveExploits0
OSV
OSV
added 2018/11/27 9:29 p.m.10 views

CVE-2018-13350

SQL injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute SQL queries via the "Event" parameter...

9.8CVSS5.9AI score0.16661EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/11/27 12:00 a.m.3 views

ShopsN single merchant b2c mall system v2.3.6 suffers from SQL injection vulnerability (CNVD-2018-25890)

ShopsN single merchant b2c mall system is an open source online store system developed using PHP + MySQL. ShopsN single merchant b2c mall system v2.3.6 Or.class.php file of the cancelorder function there is a SQL injection vulnerability , an attacker can use the vulnerability to obtain the...

8.2AI score
SaveExploits0
CNVD
CNVD
added 2018/11/27 12:00 a.m.5 views

SQL Injection Vulnerability in GreenCMS

GreenCMS is a ThinkPHP-based content management system. GreenCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

7.9AI score
SaveExploits0
OSV
OSV
added 2018/11/26 7:29 a.m.8 views

CVE-2018-19558

An issue was discovered in arcms through 2018-03-19. SQL injection exists via the json/newslist limit parameter because of ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php...

9.8CVSS5.8AI score0.01135EPSS
SaveExploits1References1
OSV
OSV
added 2018/11/26 7:29 a.m.8 views

CVE-2018-19551

Interspire Email Marketer through 6.1.6 has SQL Injection via a checkduplicatetags tagname request to Dynamiccontenttags.php...

8.8CVSS5.8AI score0.00984EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/11/26 12:00 a.m.6 views

arcms SQL Injection Vulnerability

arcms is a content management system based on layui and arphp. A SQL injection vulnerability exists in the ctl/main/Json.php, ctl/main/service/Data.php, and comp/Db/Mysql.php files in arcms 2018-03-19 and earlier versions. A remote attacker can exploit this vulnerability by sending the 'limit'...

9.8CVSS9.8AI score0.01135EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/23 12:00 a.m.15 views

HuCart SQL Injection Vulnerability

HuCart HuCart is an open source enterprise building system. HuCart 5.7.4 version of the system/class/helperclass.php file of the 'getip' function there is a SQL injection vulnerability , the vulnerability stems from the program fails to HTTP packet header data security filtering , remote attacker...

9.8CVSS10AI score0.01135EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/20 12:00 a.m.10 views

Library Management System SQL Injection Vulnerability

Library Management System is a library management system. A SQL injection vulnerability exists in Library Management System version 1.0. A remote attacker can use the 'Search for Books' page to view, add, modify, or delete information in the back-end database...

9.8CVSS7.9AI score0.01587EPSS
SaveExploits5References1
CNVD
CNVD
added 2018/11/19 12:00 a.m.14 views

S-CMS SQL Injection Vulnerability (NVD-C-2018-125521)

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. The search.php in S-CMS 1.5 has a SQL injection vulnerability, which can be exploited by an attacker through the keyword parameter to perform a SQL injecti...

7.5CVSS8AI score0.01079EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/11/19 12:00 a.m.3 views

SQL Injection Vulnerability in DaCong Network Technology Company's Website Building System

DaCong Network Technology Inc. is an Internet technology service company. A SQL injection vulnerability exists in the website building system of DaCong Network Technology Company. An attacker can exploit the vulnerability to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2018/11/19 12:00 a.m.10 views

Centreon SQL Injection Vulnerability (CNVD-2019-00829)

Centreon formerly known as Merethis Centreon is an open source IT monitoring software suite from Centreon France that needs to be paired with Nagios to manage Nagios via the web and third-party components to enable monitoring of networks, operating systems and applications. A SQL injection...

8.8CVSS9.3AI score0.01931EPSS
SaveExploits1References1
Rows per page
Query Builder