Lucene search
+L

2243 matches found

NVD
NVD
•added 2022/11/22 9:15 p.m.•34 views

CVE-2022-45529

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...

4.9CVSS0.00782EPSS
SaveExploits1References2
Mend
Mend
•added 2022/11/22 12:00 a.m.•2 views

CVE-2022-45529

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the postcategoryid parameter at \admin\includes\editpost.php. This vulnerability allows attackers to access database information...

6.9CVSS0.00782EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/22 12:00 a.m.•41 views

CVE-2022-45331

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the pid parameter at \post.php. This vulnerability allows attackers to access database information...

7.9AI score0.00809EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/11/22 12:00 a.m.•12 views

CVE-2022-45536

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

5.4AI score0.00863EPSS
SaveExploits1References2
Mend
Mend
•added 2022/11/22 12:00 a.m.•7 views

CVE-2022-45535

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...

6.9CVSS0.00827EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/22 12:00 a.m.•5 views

CVE-2022-45535: Improper Neutralization of Special Elements used in an SQL Command

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the edit parameter at \admin\categories.php. This vulnerability allows attackers to access database information...

4.9CVSS5.9AI score0.00827EPSS
SaveExploits1References3
Mend
Mend
•added 2022/11/22 12:00 a.m.•3 views

CVE-2022-45536

AeroCMS v0.0.1 was discovered to contain a SQL Injection vulnerability via the id parameter at \admin\postcomments.php. This vulnerability allows attackers to access database information...

6.9CVSS0.00863EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•50 views

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87262)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that originates from /asms/admin/?page=user/manageuser&id=Lack of validation of externally entered...

7.2CVSS7AI score0.00762EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•51 views

Automotive Shop Management System SQL Injection Vulnerability

Automotive Shop Management System is an automotive shop management system from Carlo Montero's personal developer. version v1.0 of Automotive Shop Management System is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=deletetransaction missing validation of external...

4.3AI score0.00762EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•36 views

MonikaBrzica scm SQL Injection Vulnerability

MonikaBrzica scm is a supply chain management software from the MonikaBrzica personal developer. monikaBrzica scm is vulnerable to SQL injection, which stems from the unknown part of its uredikorisnika.php component that lacks validation of external input SQL statements for the id parameter, whic...

9.8CVSS3.7AI score0.00534EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/11/21 12:00 a.m.•58 views

Simmeth System Supplier Manager Design Error Vulnerability

Simmeth System Supplier Manager is a supply chain software from Simmeth System, Germany. versions prior to Simmeth System Supplier Manager 5.6 contain a design error vulnerability that could be exploited by attackers to obtain sensitive database information...

6.5CVSS6.8AI score0.00755EPSS
SaveExploits3References1
CNVD
CNVD
•added 2022/11/16 12:00 a.m.•56 views

Eolinker goku_lite SQL Injection Vulnerability

Eolinker, an API management solution from Eolinker China, is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the file /balance/service/list. An attacker could exploit the vulnerability by gaining access to database information...

9.8CVSS9.3AI score0.00799EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/11/15 12:00 a.m.•9 views

MonikaBrzica scm 安全漏洞

MonikaBrzica scm is a supply chain management software from the MonikaBrzica personal developer. monikaBrzica scm is vulnerable to SQL injection, which stems from the unknown part of its uredikorisnika.php component that lacks validation of external input SQL statements for the id parameter, whic...

9.8CVSS7.3AI score0.00534EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/11/11 12:00 a.m.•16 views

Eolinker SQL注入漏洞

Eolinker is an API management solution from Eolinker, a China-based company. Eolinker is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in file/plugin/getList, and can be exploited by attackers to obtain database information...

9.8CVSS7.3AI score0.00767EPSS
SaveExploits1References4
Mend
Mend
•added 2022/11/03 12:00 a.m.•3 views

CVE-2021-37823

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...

6.9CVSS0.00788EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/03 12:00 a.m.•3 views

CVE-2021-37823: Improper Neutralization of Special Elements used in an SQL Command

OpenCart 3.0.3.7 allows users to obtain database information or read server files through SQL injection in the background...

4.9CVSS5.7AI score0.00788EPSS
SaveExploits1References3
zdt
zdt
•added 2022/10/13 12:00 a.m.•227 views

Online Shopping System Advanced 1.0 SQL Injection Vulnerability

Title: online-shopping-system-advanced-1.0 SQLi Author: nu11secur1ty Vendor: https://github.com/PuneethReddyHC/online-shopping-system-advanced Software: https://github.com/PuneethReddyHC/online-shopping-system-advanced/archive/refs/heads/master.zip Reference:...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•61 views

Wedding Planner wedding_details.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the id...

9.8CVSS9.6AI score0.01141EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•49 views

Online Tours & Travels Management System update_currency.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K Personal Developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version v1.0 due to a lack of validation of externally-entered SQL statements in the id parameter of its...

7.2CVSS7.1AI score0.01075EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/09/28 12:00 a.m.•42 views

Wedding Planner client_assign.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

8.8CVSS8.8AI score0.0098EPSS
SaveExploits1References1
Rows per page
Query Builder