Lucene search
+L

10214 matches found

CNNVD
CNNVD
added 2024/03/21 12:00 a.m.10 views

WordPress Plugin WP Automatic SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin WP Automatic is vulnerable...

9.9CVSS9.4AI score0.93971EPSS
SaveExploits16References3
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.7 views

PT-2024-22026 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical issue was found in the system, affecting an unknown function of the file /admin/search.php. The manipulation of the searchdata argument leads to SQL injection. ...

6.5CVSS7.2AI score0.00496EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.12 views

PT-2024-22018 · Unknown · Campcodes Online Marriage Registration System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Marriage Registration System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Marriage Registration System. This issue affects unknown code in the file /user/search.php. The manipulation of...

6.5CVSS7.2AI score0.00496EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.12 views

Sentrifugo SQL注入漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which stems from a missing id parameter in the...

9.8CVSS8AI score0.00863EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.12 views

Sentrifugo SQL注入漏洞

Sentrifugo is a human resource management system. The system includes functions for human resources management, performance appraisal, recruitment management and asset management. A SQL injection vulnerability exists in Sentrifugo version 3.2, which originates from the lack of validation of...

9.8CVSS8.1AI score0.00856EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/21 12:00 a.m.9 views

Online Marriage Registration System SQL注入漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A SQL injection vulnerability exists in Campcodes Online Marriage Registration System version 1.0, which originates from a SQL injection vulnerability in the searchdata parameter of the...

6.5CVSS7AI score0.00496EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/03/21 12:00 a.m.16 views

PT-2024-23097 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: A SQL injection vulnerability exists, allowing a remote user to send a specially crafted query to the server and extract all the data from it. This issue is related to the...

9.8CVSS7.6AI score0.00825EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.14 views

Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the JOBREGID parameter of the /admin/applicants/controller.p...

6.5CVSS7.9AI score0.00496EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/03/20 12:00 a.m.10 views

Campcodes Online Job Finder System SQL Injection Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which originates from a SQL injection vulnerability in the UESRID parameter of the /admin/user/controller.php file...

6.5CVSS7.9AI score0.00601EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/19 8:15 p.m.8 views

CVE-2024-28595

SQL Injection vulnerability in Employee Management System v1.0 allows attackers to run arbitrary SQL commands via the adminid parameter in update-admin.php...

9.8CVSS6AI score0.01229EPSS
SaveExploits4References1
OSV
OSV
added 2024/03/19 5:15 p.m.10 views

CVE-2023-44091

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. This ulnerability allowed SQL injections to be made even if authentication failed.This issue affects Pandora FMS: from 700 through 776...

9.8CVSS5.8AI score0.00452EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.8 views

PT-2024-21508 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown functionality of the file /admin/category/controller.php. The manipulation of the CATEGORYID argument lead...

6.5CVSS7.1AI score0.00496EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.6 views

KnowBand Security Breach

KnowBand is a plugin from KnowBand Inc. A security vulnerability exists in KnowBand spinwheel v.3.0.3 and earlier versions, which stems from the presence of a SQL injection vulnerability. The vulnerability can be exploited to elevate privileges and obtain sensitive information via the...

9.8CVSS7.5AI score0.00831EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/19 12:00 a.m.12 views

Netentsec NS-ASG Application Security Gateway SQL Injection Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from the parameter checkVirtualSiteId in the file /vpnweb/index.php?para=index...

9.8CVSS7.9AI score0.00812EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.8 views

PT-2024-22408 · Knowband · Knowband Spinwheel

Name of the Vulnerable Software and Affected Versions: KnowBand spinwheel versions 3.0.3 and earlier Description: The issue allows a remote attacker to gain escalated privileges and obtain sensitive information via the SpinWheelFrameSpinWheelModuleFrontController::sendEmail method. This is a SQL...

9.8CVSS8AI score0.00831EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.10 views

PT-2024-21383 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical issue was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /vpnweb/index.php?para=index and allows for SQL injection...

9.8CVSS7AI score0.00812EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.8 views

PT-2024-21492 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical issue has been discovered, affecting the /admin/login.php file. The manipulation of the user email argument leads to SQL injection. This issue can be exploited remotely...

6.5CVSS7.1AI score0.00582EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.18 views

PT-2024-18317 · Gamipress · Gamipress

Name of the Vulnerable Software and Affected Versions: GamiPress versions up to, and including, 6.8.6 Description: The issue concerns a SQL Injection vulnerability via the achievement types attribute of the gamipress earnings shortcode. This vulnerability is due to insufficient escaping on the...

8.8CVSS9.5AI score0.00956EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/03/19 12:00 a.m.10 views

PT-2024-21457 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online Job Finder System, affecting unknown code in the file /admin/vacancy/controller.php. The manipulation of the id/CATEGO...

6.5CVSS7.1AI score0.00601EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/03/18 12:00 a.m.12 views

PT-2024-21201 · Amss++ · Amss++

Name of the Vulnerable Software and Affected Versions: AMSS++ version 4.31 Description: The issue allows SQL injection through the /amssplus/modules/book/main/bookdetail group.php endpoint, in multiple parameters. This could enable a remote attacker to send a specially crafted SQL query to the...

8.2CVSS7.4AI score0.00534EPSS
SaveExploits0References5
Rows per page
Query Builder