Lucene search
K

723 matches found

CNVD
CNVD
added 2020/02/03 12:0 a.m.1 views

SQL Injection Vulnerability in MediPro's Township Government Portal System

MediPro Township Government Portal System is a website suitable for township government agencies to create local portals to publicize local resources, realize open government affairs and promote township grassroots informatization. A SQL injection vulnerability exists in MediPro Township Governme...

7.4AI score
Exploits0
CNVD
CNVD
added 2020/01/14 12:0 a.m.1 views

Online TV Database SQL Injection Vulnerability

Online TV Database is a set of online TV program database. A SQL injection vulnerability exists in the 'ID' parameter in Online TV Database version 2011. The vulnerability stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit...

9.8CVSS8.2AI score0.01034EPSS
Exploits0References1
CNVD
CNVD
added 2020/01/09 12:0 a.m.1 views

SQL Injection Vulnerability in the Background Administration C***t.asp Page of Angel School Training Website System

Angel school training website system is an open source website management system. Angel school training website system background management Ct.asp page there is a SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/01/07 12:0 a.m.1 views

PowerSoft Agile Development Framework 7.0.6 suffers from SQL Injection Vulnerability

PowerSoft Agile Development Framework is a set of software system projects based on intelligent scalable components, suitable for enterprise management software and Internet platform back-end system development, the framework provides a perfect permissions role management functions, rapid...

8AI score
Exploits0
CNVD
CNVD
added 2019/11/28 12:0 a.m.1 views

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01258)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/11/04 12:0 a.m.1 views

SQL injection vulnerability in seacms backend (CNVD-2019-43675)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/10/29 12:0 a.m.2 views

pixelpost SQL injection vulnerability (CNVD-2019-39945)

pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A SQL injection vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of validation of externally-entered SQL statements in the database-based application and can be exploited by an...

9.8CVSS8.2AI score0.01275EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/10 12:0 a.m.1 views

Cisco Firepower Management Center SQL Injection Vulnerability (CNVD-2019-34736)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A SQL injection vulnerability exists in the web-based management interface in Cisco FMC, which stems from the program's failure to properly validate input. A remote attacker could exploit...

9CVSS8AI score0.02965EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/08 12:0 a.m.1 views

SugarCRM pmse_Inbox Module SQL Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the pmseInbox module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...

8.8CVSS8AI score0.01163EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/08 12:0 a.m.2 views

SugarCRM Administration Module SQL Injection Vulnerability

SugarCRM is a set of open source customer relationship management software . A SQL injection vulnerability exists in the Administration module of SugarCRM. The vulnerability stems from a lack of input validation. An attacker can exploit this vulnerability to inject custom PHP code...

8.8CVSS8AI score0.01163EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/10/02 12:0 a.m.3 views

PT-2019-3380 · Cisco · Cisco Firepower Management Center

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Description: The issue is related to improper input validation in the web-based management interface, allowing an authenticated, remote attacker to execute arbitra...

9CVSS9AI score0.02965EPSS
Exploits0References3
OSV
OSV
added 2019/09/10 12:15 p.m.3 views

CVE-2017-18602

The examapp plugin 1.0 for WordPress has SQL injection via the wp-admin/admin.php?page=examappUserResult id parameter...

8.8CVSS5.8AI score0.01576EPSS
Exploits2References1
CNVD
CNVD
added 2019/09/10 12:0 a.m.1 views

LibreNMS SQL Injection Vulnerability (CNVD-2019-32206)

LibreNMS is a PHP/MYSQL/SNMP-based open source monitoring tool . A SQL injection vulnerability exists in LibreNMS 1.47 and earlier versions, which can be exploited by an authenticated attacker to corrupt database queries to extract or manipulate data...

8.8CVSS7.8AI score0.01346EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/29 12:0 a.m.3 views

WordPress pie-register plugin SQL injection vulnerability

WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. pie-register is a plugin for user registration and login form customization. A SQL injection vulnerability exists in WordPress...

9.8CVSS8AI score0.01869EPSS
Exploits4References1
CNVD
CNVD
added 2019/07/15 12:0 a.m.1 views

SQL injection vulnerability exists in it***.php of website building system of Shanghai To-Mei Information Technology Co.

Ltd. is a company dedicated to corporate or entrepreneurial image design and online business expansion services. There is a SQL injection vulnerability in it.php, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/05/14 12:0 a.m.1 views

SQL Injection Vulnerability in Acme CMS Backend vi***.php

Acme CMS is a CMS builder using PHP + Mysql architecture, multi-language, responsive display, suitable for personal website construction. Aike CMS background vi.php SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/04/04 12:0 a.m.1 views

SQL injection vulnerability in Five Fingers CMS co***.php page

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS co.php page SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/04/01 12:0 a.m.3 views

BlueCMS SQL Injection Vulnerability

BlueCMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in BlueCMS version 1.6. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

9.8CVSS8.5AI score0.01452EPSS
Exploits1References1
CNVD
CNVD
added 2019/03/25 12:0 a.m.1 views

SQL Injection Vulnerability in semcms Backend

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/03/18 12:0 a.m.1 views

SQL Injection Vulnerability in Xinhuo Collaboration Office System ka***/ka***.php

Xinhuo Co-operation Office System is an office system based on php and mysql development. SQL injection vulnerability exists in ka/ka.php, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
Rows per page
Query Builder