Lucene search
+L

10214 matches found

CNNVD
CNNVD
added 2022/05/26 12:00 a.m.9 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter in /admin.php/vod/admin/topic/del for...

7.2CVSS6.1AI score0.00942EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:00 a.m.10 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the lack of validation of the id parameter of /admin.php/pic/admin/pic/hy against external...

8.8CVSS6.1AI score0.00955EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:00 a.m.11 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability, which originates from the id parameter in /admin.php/singer/admin/lists/zhuan that lacks validation of...

7.2CVSS6.1AI score0.00942EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/26 12:00 a.m.28 views

CSCMS Music Portal System SQL注入漏洞

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the lack of validation of the id parameter of /admin.php/pic/admin/type/save for...

7.2CVSS6.1AI score0.00942EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/05/25 1:15 p.m.6 views

CVE-2022-29650

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

9.8CVSS6AI score0.01256EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/05/25 12:00 a.m.11 views

ARCHIBUS Web Central SQL注入漏洞

ARCHIBUS Web Central is a web-based network management center for ARCHIBUS that organizes facilities and infrastructure management tasks in an intuitive web browser interface. All infrastructure data is stored in a centralized repository so that authorized users from anywhere in the world can...

9.8CVSS6.1AI score0.01018EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/05/25 12:00 a.m.11 views

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system designed primarily for use in the food delivery industry.Online Food Ordering System version 1.0 is vulnerable to a SQL injection vulnerability in the /online-food-order/food-search.php search parameter in...

9.8CVSS5.9AI score0.01256EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
added 2022/05/24 5:21 p.m.15 views

Mattermost Server is vulnerable to SQL Injection when executing multiple POST requests

An issue was discovered in Mattermost Server before 4.3.0, 4.2.1, and 4.1.2. It allows SQL injection during the fetching of multiple posts...

9.8CVSS8.2AI score0.01103EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/05/24 3:15 p.m.16 views

CVE-2022-30843

Room-rent-portal-site v1.0 is vulnerable to SQL Injection via /rrps/classes/Master.php?f=deletecategory, id...

8.8CVSS5.9AI score0.00969EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/24 2:15 p.m.10 views

CVE-2022-30461

Water-billing-management-system v1.0 is vulnerable to SQL Injection via /wbms/classes/Master.php?f=deleteclient, id...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References1
OSV
OSV
added 2022/05/24 1:15 p.m.6 views

CVE-2022-30455

Badminton Center Management System 1.0 is vulnerable to SQL Injection via /bcms/classes/Master.php?f=deletecourtrental, id...

9.8CVSS5.8AI score0.01079EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 1:15 p.m.4 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/24 1:15 p.m.7 views

CVE-2021-42655

SiteServer CMS V6.15.51 is affected by a SQL injection vulnerability...

8.8CVSS5.8AI score0.01204EPSS
SaveExploits1References4
OSV
OSV
added 2022/05/24 1:15 p.m.10 views

CVE-2022-30454

Merchandise Online Store 1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=deleteproduct...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/24 3:15 a.m.4 views

CVE-2022-29305

imgurl v2.31 was discovered to contain a Blind SQL injection vulnerability via /upload/localhost...

8.1CVSS6AI score0.00909EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/05/24 12:00 a.m.9 views

Telecommunication Software SAMwin Contact Center Suite SQL注入漏洞

Telecommunication Software SAMwin Contact Center Suite is a highly versatile and flexible contact center software solution from Telecommunication Software. A security vulnerability exists in Telecommunication Software SAMwin Contact Center Suite version 5.1 that stems from an architectural issue...

9.8CVSS8.4AI score0.00962EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/23 8:16 a.m.10 views

CVE-2022-1014

The WP Contacts Manager WordPress plugin through 2.2.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to an SQL injection vulnerability...

9.8CVSS5.9AI score0.01583EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/05/23 12:00 a.m.12 views

Inout Blockchain AltExchanger SQL注入漏洞

Nesote Technologies Inout Blockchain AltExchanger is a premium and secure cryptocurrency exchange platform script by Nesote Technologies India. It helps you to start cryptocurrency exchange service online. An SQL injection vulnerability exists in Inout Blockchain AltExchanger version 1.2.1, which...

7.5CVSS7.5AI score0.01069EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/05/23 12:00 a.m.9 views

WordPress plugin WP Contacts Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress WP Contacts Manager is vulnerable to a SQL injection vulnerability, which...

9.8CVSS5.9AI score0.01583EPSS
SaveExploits2References2
OSV
OSV
added 2022/05/20 1:15 p.m.9 views

CVE-2022-28105

Online Sports Complex Booking System v1.0 was discovered to contain a blind SQL injection vulnerability via the id parameter in /scbs/viewfacility.php...

9.8CVSS7.3AI score0.01079EPSS
SaveExploits1References1
Rows per page
Query Builder