4529 matches found
NeDi SQL Injection Vulnerability (CNVD-2021-22163)
NeDi is an open source software tool that discovers, maps and inventories network devices and tracks connected end nodes. A SQL injection vulnerability exists in the Monitoring History function in endpoint /Monitoring-History.php in NeDi 1.9C. An attacker can exploit this vulnerability to access...
SQL Injection Vulnerability in iCMS Content Management System
iCMS is an efficient and simple content management system built with PHP and MySQL. An SQL injection vulnerability exists in the iCMS content management system, which can be exploited by attackers to obtain sensitive information from the database...
SQL injection vulnerability in pr***.asp page of website building system of Ningbo Hi-Tech Zone Aokai Network Technology Co.
Ningbo Hi-Tech Zone Aokai Network Technology Co., Ltd, provides appropriate business and Internet brand promotion services. Ningbo High-tech Zone Aokai Network Technology Co., Ltd. building system pr.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive...
CVE-2021-22854 Soar Cloud System Co., Ltd. HR Portal - SQL Injection
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege...
Soar Cloud System SQL Injection Vulnerability
Soar Cloud System is a HR system solution system developed by Soar. The Soar Cloud System HR portal suffers from a SQL injection vulnerability that stems from not filtering SQL injection statements, which allows a remote attacker to inject SQL syntax and obtain all data in the database without...
Sourcecodester Baby Care System SQL Injection Vulnerability
Baby Care System is a heartbeat and temperature detection system. Baby Care System v1.0 is susceptible to SQL injection attacks. The vulnerability stems from the contentsectionpage.php page not filtering user input for SQL injection, which can be exploited by attackers to obtain database...
NeDi <= 1.9C, 2.0 Multiple Vulnerabilities
NeDi is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribu...
CVE-2020-35567
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances...
Default credentials
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances...
CVE-2020-35567
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances...
CVE-2020-24841
PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...
QIWI: Remote Code Execution on contactws.contact-sys.com via SQL injection in TAktifBankObject.GetOrder in parameter DOC_ID
Summary The API interface on https://contactws.contact-sys.com:3456/ accepts a body to interact with the server's AppServ object. Because of insufficient input validation, an attacker can abuse the DOCID parameter on the TAktifBankObject operation GetOrder to inject arbitrary SQL statements into...
CVE-2020-35567: Use of Hard-coded Credentials
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances...
CVE-2020-24841: Improper Neutralization of Special Elements used in an SQL Command
PNPSCADA 2.200816204020 allows SQL injection via parameter 'interf' in /browse.jsp. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database...
PT-2021-11798
Name of the Vulnerable Software and Affected Versions: mbCONNECT24 versions through 2.6.2 mymbCONNECT24 versions through 2.6.2 Description: The software uses a secure password for database access, but this password is shared across instances. Recommendations: For mbCONNECT24 versions through 2.6....
CVE-2021-26751
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application...
Sql injection
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application...
CVE-2021-26751
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application...
PT-2021-17122
Name of the Vulnerable Software and Affected Versions NeDi version 1.9C Description The issue allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint "/Monitoring-History.php" via the det HTTP GET parameter. This enables an attacker to access all...
CVE-2021-26751: Improper Neutralization of Special Elements used in an SQL Command
NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application...