Lucene search
+L

9984 matches found

CNVD
CNVD
added 2018/08/09 12:0 a.m.3 views

SQL Injection Vulnerability in Website Development System of Transparent Web Information Development Co.

eTranslate Web Information Development Ltd. is a company that provides system development and design, website visual design, internet marketing and web hosting services to its clients. ET Net Information Development Co., Ltd. website builder system there are SQL injection vulnerabilities, attacke...

7.7AI score
Exploits0
CNVD
CNVD
added 2018/08/07 12:0 a.m.6 views

EMLsoft SQL Injection Vulnerability

EMLsoft is an enterprise address book management system. A SQL injection vulnerability exists in the upload\eml\action\action.user.php file in EMLsoft version 5.4.5. A remote attacker can exploit this vulnerability to view, add, modify or delete information in the back-end database with the help ...

8.8CVSS9AI score0.00995EPSS
Exploits1References1
OSV
OSV
added 2018/08/06 3:29 p.m.7 views

CVE-2018-14961

dl/dlsendmail.php in zzcms 8.3 has SQL Injection via the sql parameter...

9.8CVSS5.8AI score0.01794EPSS
Exploits1References2
CNVD
CNVD
added 2018/08/06 12:0 a.m.3 views

ShopsN open source online store full system AdController file there are SQL injection vulnerabilities

ShopsN free version of the B2C e-commerce is a product of Shanghai Yisu Network Technology Co., Ltd. a full-featured enterprise-class commercial standards in line with the real allow free commercial use of open source online store full network system. ShopsN 2.3.3 official version of the...

8AI score
Exploits0
CNVD
CNVD
added 2018/08/05 12:0 a.m.3 views

PbootCMS V1.1.7 SQL Injection Vulnerability in Co***.php Page

PbootCMS is a new core open source enterprise building system developed by Avantech. PbootCMS V1.1.7 Co.php page has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2018/08/04 12:0 a.m.2 views

SQL Injection Vulnerability in Huayue Ares Enterprise Management Consultant Co.

Hua Yue Ares Enterprise Management Consultant Limited is a company that provides information computerization and integration services for small and medium-sized enterprises. A SQL injection vulnerability exists in the website builder system of Hua Yue Ares Enterprise Management Consultant Limited...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/08/03 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Foshan Shunde District Outlook Software Design Co.

Foshan City, Shunde District, out of the frame software design limited company's main business is website production, software development, print advertising. There is a SQL injection vulnerability in the website building system of Foshan Shunde Outlook Software Design Co. Attackers can use the...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/08/03 12:0 a.m.2 views

SQL injection vulnerability in le***.php page of Guowei CMS School Group System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. A SQL injection vulnerability exists in the le.php page of the State Micro CMS school station system. Attackers can use the vulnerability to...

8AI score
Exploits0
CNVD
CNVD
added 2018/08/02 12:0 a.m.4 views

SQL Injection Vulnerability in Interview Module of State Micro CMS School Crowd System

State Micro CMS is one of the mainstream CMS systems in China, and is also the largest open source platform provider in the field of PHP in Southern China. State Micro CMS school station group system interview module SQL injection vulnerability. Attackers can use the vulnerability to obtain...

7.9AI score
Exploits0
CNVD
CNVD
added 2018/08/02 12:0 a.m.2 views

SQL Injection Vulnerability in Website Building System of Haikou ECCOM Sky Information Technology Co.

hereinafter referred to as "ECCOM Sky" is a collection of website construction, website planning, website optimization, search engine optimization and a variety of office software development, program development in one of the network information technology services company. There is a SQL...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/08/02 12:0 a.m.1 views

SQL injection vulnerability in sh***.asp page of website building system of Wuxi Yi Shang Technology Co.

Wuxi Yi Shang Technology Co., Ltd. is a network planning and marketing enterprise. There is a SQL injection vulnerability in the sh.asp page of the website building system of Wuxi Yi Shang Technology Co. Attackers can use the vulnerability to obtain sensitive information in the database...

7.7AI score
Exploits0
OSV
OSV
added 2018/07/22 5:29 p.m.7 views

CVE-2018-14501

manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...

9.8CVSS5.8AI score0.01452EPSS
Exploits1References1
CNVD
CNVD
added 2018/07/19 12:0 a.m.2 views

SQL Injection Vulnerability in V1.7 Backend of School Worry-free Enterprise Building System

School carefree enterprise website system Xiao5uCompany is a set of company and enterprise-oriented website building system. SQL injection vulnerability exists in the background of XiaowuCompany V1.7. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
Exploits0
OSV
OSV
added 2018/07/18 7:29 p.m.7 views

CVE-2018-14389

joyplus-cms 1.6.0 has SQL Injection via the manager/adminajax.php val parameter...

9.8CVSS5.8AI score0.01452EPSS
Exploits1References1
CNVD
CNVD
added 2018/07/14 12:0 a.m.1 views

SQL Injection Vulnerability in South Data's Website Building System

Southern Data, is a high-tech enterprise mainly engaged in the development, sales and service of network software and other businesses. Southern Data's website building system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2018/07/13 12:0 a.m.2 views

SQL injection vulnerability in Quick Help Cloud enterprise website building system

Quick Help Cloud is a high-quality intellectual property and enterprise information service platform, providing enterprise trademark registration, high-tech enterprise certification, patent application, copyright registration and other intellectual property services. Quick Help Cloud enterprise...

7.6AI score
Exploits0
OSV
OSV
added 2018/07/12 7:29 p.m.5 views

CVE-2018-14012

WolfSight CMS 3.2 allows SQL injection via the PATHINFO to the default URI...

9.8CVSS5.8AI score0.01587EPSS
Exploits1References1
CNVD
CNVD
added 2018/07/09 12:0 a.m.5 views

Dolibarr ERP/CRM SQL Injection Vulnerability (CNVD-2018-13454)

Dolibarr ERP/CRM is a Web-based enterprise resource planning ERP and customer relationship management CRM system from the Dolibarr Foundation in France. The system can be used to manage products, inventory, invoices, orders, and more. A SQL injection vulnerability exists in the product/card.php...

9.8CVSS9.8AI score0.01918EPSS
Exploits0References1
OSV
OSV
added 2018/07/08 4:29 p.m.5 views

UBUNTU-CVE-2018-13447

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS7.7AI score0.01937EPSS
Exploits0References2
OSV
OSV
added 2018/07/08 4:29 p.m.19 views

UBUNTU-CVE-2018-13450

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS7.7AI score0.01918EPSS
Exploits0References2
Rows per page
Query Builder