Lucene search
K

27 matches found

CNVD
CNVD
added 2025/12/12 12:0 a.m.1 views

WordPress Accordion Slider PRO plugin SQL Injection Vulnerability

WordPress Accordion Slider PRO plugin is a responsive, touch-enabled slider plugin for WordPress that allows users to create professional and elegant slider effects. The WordPress Accordion Slider PRO plugin suffers from an SQL injection vulnerability that stems from the application's lack of...

9.8CVSS8AI score0.00034EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.2 views

ASUS Router 安全漏洞

ASUS Router is a router product and accompanying management application from ASUS, primarily used for wireless connectivity and management of home and business networks. ASUS Router suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally enter...

5.9CVSS7.8AI score0.00112EPSS
Exploits0References2
CNVD
CNVD
added 2025/10/23 12:0 a.m.3 views

ChanCMS /cms/article/findField File SQL Injection Vulnerability

ChanCMS is a content management system. A SQL injection vulnerability exists in ChanCMS 3.3.2 and earlier versions, which originates from the lack of validation of external SQL statements in the function findField in the file /cms/article/findField. An attacker can exploit this vulnerability to...

7.2CVSS8.2AI score0.00034EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/21 12:0 a.m.2 views

Job Diary view-emp.php File SQL Injection Vulnerability

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

9.8CVSS8.3AI score0.00211EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/07/14 12:0 a.m.2 views

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /WeGIA/html/socio/sistema/processadeletarsocio.php endpoint. An attacker could exploit this vulnerability to...

10CVSS7.9AI score0.00427EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.1 views

VMware AVI Load Balancer 安全漏洞

VMware Avi Load Balancer is a load balancing platform from VMware. VMware Avi Load Balancer suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

6.8CVSS8AI score0.003EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/16 12:0 a.m.1 views

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from a lack of validation of the parameter ID in the file /pages/purchaseadd.php for externally entered SQL...

9.8CVSS8.1AI score0.00277EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/02/12 12:0 a.m.2 views

Code-Projects Wazifa System 注入漏洞

Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the /controllers /control.php file. An attacker can exploit this vulnerability to execute illegal SQL commands t...

8.8CVSS8.1AI score0.00128EPSS
Exploits1References5
CNVD
CNVD
added 2025/01/16 12:0 a.m.1 views

Selesta Visual Access Manager SQL Injection Vulnerability (CNVD-2025-22658)

Selesta Visual Access Manager is a visual access manager from Selesta. Selesta Visual Access Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in /common/vamSql.php. An attacker can exploit this vulnerability to perform...

5.4CVSS8.1AI score0.00222EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.8 views

Fortinet FortiClientEMS SQL注入漏洞

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. A SQL injection vulnerability exists...

9.8CVSS8.2AI score0.94078EPSS
Exploits4References4
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.1 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00099EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.1 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00099EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/07/31 12:0 a.m.2 views

Advantech iView SQL注入漏洞

Advantech iView is a software developed by Advantech for managing B+BSmartWorx series devices through a simple network management protocol. Advantech iView suffers from a SQL injection vulnerability that originates from the application's lack of validation of externally entered SQL statements. An...

8.8CVSS8.2AI score0.00117EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.2 views

Blazer SQL注入漏洞

Blazer is a tool. Allows SQL queries to be executed against a database from a Web panel.A SQL injection vulnerability exists in versions of Blazer prior to 2.6.0, which stems from the application's lack of validation of externally entered SQL statements. An attacker could exploit this vulnerabili...

7.5CVSS5.9AI score0.00186EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/03/22 12:0 a.m.3 views

McAfee Epolicy Orchestrator SQL注入漏洞

McAfee Epolicy Orchestrator McAfee Epo is a U.S. based solution for managing endpoint, network, data security, and compliance. a SQL injection vulnerability exists in versions of McAfee Enterprise ePolicy Orchestrator prior to 5.10 Update 13. The vulnerability stems from the application's lack of...

5.4CVSS5.9AI score0.00156EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.2 views

CuppaCMS SQL注入漏洞

CuppaCMS is a content management system CMS.A SQL injection vulnerability exists in CuppaCMS, which stems from the lack of validation of externally entered SQL statements in the database-based application. An attacker could exploit this vulnerability to execute illegal SQL commands...

7.8CVSS6AI score0.13123EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/01/14 12:0 a.m.3 views

Le-Yan Dental Management System SQL注入漏洞

Le-Yan Dental Management System is a dental management system from Le-Yan, China. sql injection vulnerability exists in Le-Yan Dental Management System, which originates from the application's lack of validation of externally entered SQL statements, and can be exploited by attackers to execute...

10CVSS6.1AI score0.02502EPSS
Exploits0References2
CNNVD
CNNVD
added 2021/02/17 12:0 a.m.4 views

CGE property management system SQL injection vulnerability

CGE property management system is an application software from CGE China. It provides a system for financial management. A SQL injection vulnerability exists in the CGE property management system, which arises from a lack of validation of externally-entered SQL statements in a database-based...

9.8CVSS7.3AI score0.00313EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/02/15 12:0 a.m.4 views

Mutare Voice SQL Injection Vulnerability

A SQL injection vulnerability exists in Mutare Voice that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...

9.8CVSS7.4AI score0.00366EPSS
Exploits0References2
CNVD
CNVD
added 2020/03/31 12:0 a.m.4 views

odata4j sql injection vulnerability

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS9.8AI score0.00281EPSS
Exploits0
Rows per page
Query Builder