Lucene search
+L

10214 matches found

CNVD
CNVD
added 2019/12/10 12:00 a.m.3 views

SQL Injection Vulnerability in Changzhou Shengke Network Technology Co.

Changzhou Shengke Network Technology Co., Ltd. is the industry's leading technology and unique creativity to provide enterprises with a total solution for website construction company. Changzhou Shengke Network Technology Co., Ltd. website construction system there are SQL injection...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/12/03 12:00 a.m.7 views

NiuShop B2C Single Merchant Mall System SQL Injection Vulnerability in at***.php Parameters on Front-end wa***.php Page

NiuShop B2C single merchant mall system is a PHP open source e-commerce system designed and developed completely independently by Shanxi NiuKu Information Technology Co. NiuShop B2C single merchant mall system front wa.php page at parameters there is a SQL injection vulnerability, an attacker can...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/12/02 12:00 a.m.8 views

TYPO3 wec_discussion extension SQL Injection Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. wecdiscussion extension is a third-party forum extension plugin used in it. A SQL injection vulnerability exists in TYPO3 wecdiscussion extension versions prior to 2.1.1. The...

9.8CVSS8.2AI score0.01218EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/30 12:00 a.m.3 views

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02215)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/11/30 12:00 a.m.4 views

SQL Injection Vulnerability in Jinhang Online Marking System (CNVD-2020-02207)

JINHANG online marking system can provide a variety of performance analysis reports based on the measurement of students, classes, schools, grades, teachers, subjects, knowledge points, etc., and can provide a comprehensive analysis of the results of each student's previous examinations. There is...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/11/29 12:00 a.m.7 views

SQL Injection Vulnerability in Super CMS Content Management System Backend

Super CMS content management system by the SEO Research Center moonseo.cn in order to solve the problem of website optimization and research and development of a set of products, this product adopts an object-oriented approach to independent research and development of the MVC framework...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/11/28 12:00 a.m.3 views

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-00775)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/11/28 12:00 a.m.6 views

SQL Injection Vulnerability in Laike E-commerce System (CNVD-2020-01257)

Laike e-commerce with independent copyright system, is an integrated e-commerce system all the functions of the platform. A SQL injection vulnerability exists in Laike E-commerce system, which can be exploited by attackers to access sensitive database information...

8AI score
SaveExploits0
CNVD
CNVD
added 2019/11/25 12:00 a.m.10 views

TYPO3 SQL Injection Vulnerability (CNVD-2019-47027)

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A SQL injection vulnerability exists in Typo3 versions 4.5.0 through 4.5.5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

9.8CVSS8.2AI score0.01369EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/23 12:00 a.m.9 views

SQL Injection Vulnerability in Kaixin Helpdesk System PC***_ad***.aspx

The Kairos Helpdesk System is a system for dealing with day-to-day issues. A SQL injection vulnerability exists in the Qixing Helpdesk System PCad.aspx, which can be exploited by attackers to obtain sensitive information...

7.9AI score
SaveExploits0
OSV
OSV
added 2019/11/21 6:15 p.m.10 views

DEBIAN-CVE-2019-18890

A SQL injection vulnerability in Redmine through 3.2.9 and 3.3.x before 3.3.10 allows Redmine users to access protected information via a crafted object query...

6.5CVSS6.7AI score0.04338EPSS
SaveExploits2References1
CNVD
CNVD
added 2019/11/21 12:00 a.m.14 views

Cisco DNA Spaces:Connector SQL Injection Vulnerability

Cisco DNA Spaces is a set of indoor location services platform from Cisco.Cisco DNA Spaces:Connector is one of the connectors used to support the communication of Cisco wireless controllers. A SQL injection vulnerability exists in the Web UI in versions prior to Cisco DNA Spaces: Connector 2.0 th...

6.5CVSS7.8AI score0.0115EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/21 12:00 a.m.9 views

SQL Injection Vulnerability in Yunye CMS in***.php Page

Yunye CMS is an enterprise website building system developed by Luoyang Yunye Information Technology Co. There is a SQL injection vulnerability in the CMS in.php page, which can be exploited by attackers to obtain sensitive information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2019/11/19 12:00 a.m.15 views

newbee-mall SQL Injection Vulnerability

newbee-mall is an e-commerce system. A SQL injection vulnerability exists in the main/resources/mapper/NewBeeMallGoodsMapper.xml file in versions of newbee-mall prior to 2019-10-23, which stems from a lack of validation of externally entered SQL statements in database-based applications and can b...

9.8CVSS8.1AI score0.01838EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/11/17 12:00 a.m.3 views

SQL injection vulnerability in pi***.php page of website building system of Hebei Chenguang Network Technology Co.

Hebei Chenguang Network Technology Co., Ltd. is subordinate to Hebei Chenguang Holding Group, founded in 2005, is a high-tech enterprise dedicated to providing informationization construction for various enterprises and government agencies. Hebei Chenguang Network Technology Co., Ltd. building...

7.6AI score
SaveExploits0
OSV
OSV
added 2019/11/14 12:15 a.m.8 views

CVE-2019-3661

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' in McAfee Advanced Threat Defense ATD prior to 4.8 allows remote authenticated attacker to execute database commands via carefully constructed time based payloads...

8.8CVSS7.5AI score0.01131EPSS
SaveExploits0References1
CNVD
CNVD
added 2019/11/14 12:00 a.m.3 views

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45196)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/11/14 12:00 a.m.12 views

SQL Injection Vulnerability in LebiShop (Multi-language Online Shopping Mall System)

Lebi multilingual online shopping mall system LebiShop, free , full open source , support for secondary development . NET 4.5 C language development , using SQL Server and MySQL database . LebiShop has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/11/14 12:00 a.m.2 views

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45360)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/11/14 12:00 a.m.4 views

SQL Injection Vulnerability in SeaCMS Backend (CNVD-2019-45355)

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. There is a SQL injection vulnerability in the background of SeaCMS, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
Rows per page
Query Builder