CVE-2022-29683

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/pagedel...

Moodle SQL注入漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A SQL injection vulnerability exists in Moodle versions 3.9.0 through 3.11.6, which could allow a remote attacker to send a specially...

GHSA-7592-93RM-6GPX Injection in Jenkins

A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and canno...

CVE-2022-29988

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=delete...

hw: cpu: intel: Branch History Injection (BHI)

A flaw was found in hw. The Branch History Injection BHI describes a specific form of intra-mode BTI. This flaw allows an unprivileged attacker to manipulate the branch history before transitioning to supervisor or VMX root mode. This issue is an effort to cause an indirect branch predictor to...

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendancedelete.php...

ZOHO ManageEngine OpManager SQL注入漏洞

ZOHO ManageEngine OpManager is a comprehensive network monitoring software from ZOHO USA. A SQL injection vulnerability exists in versions prior to ZOHO ManageEngine OpManager 125588 and 125603, which stems from a problem in the inventory reporting module. An attacker could use this vulnerability...

MariaDB SQL注入漏洞

MariaDB is a free and open source database management system from the MariaDB Foundation and a forked version of MySQL with the Maria storage engine. A security vulnerability exists in MariaDB Server v10.7 and lower, which can be exploited by an attacker to cause a denial of service DoS via a...

ARRIS SBR-AC1900P和ARRIS SBR-AC3200P 操作系统命令注入漏洞

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS USA. Multiple ARRIS products command injection vulnerability, which stems from the firewall local logging feature failing to properly filter constructed command special characters, commands, etc. An attacker could exploit...

ARRIS SBR-AC1900P和ARRIS SBR-AC3200P 操作系统命令注入漏洞

ARRIS SBR-AC1900P, SBR-AC3200P and SBR-AC1200P is a Wi-Fi router from ARRIS, Inc. Multiple ARRIS products are vulnerable to a command injection vulnerability, which stems from the pppoeUserName, pppoePassword, and pppoeService parameters in the pppoe function failing to properly filter the...

CVE-2022-25393

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-26170

Simple Mobile Comparison Website v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...

CVE-2022-23986

SQL injection vulnerability in the phpUploader v1.2 and earlier allows a remote unauthenticated attacker to obtain the information in the database via unspecified vectors...

Zyxel Nbg6816和Zyxel Nbg6817 操作系统命令注入漏洞

The Zyxel Nbg6816 and Zyxel Nbg6817 are both products of China's Hopkins Technology Zyxel.The Zyxel Nbg6816 is a dual-band wireless gigabit router.The Zyxel Nbg6817 is a wireless router. The Zyxel Nbg6816 and Zyxel Nbg6817 have an operating system command injection vulnerability that stems from...

Baicloud Cms 安全漏洞

Baicloud Cms is a Chinese lightweight open source content management system Cms based on Php and MySQL, running on Linux, Windows and other platforms. BaiCloud cms v2.5.7 suffers from a SQL injection vulnerability that allows attackers to pass the tongji and baidumap parameters in...

WordPress plugin SQL注入漏洞

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.A SQL injection vulnerability exists in versions of the WordPress plugin Asgaros Forum prior to 1.15.15, which...

Foxit PDF Reader 操作系统命令注入漏洞

Foxit PDF Reader is a PDF reader from China's Foxit Foxit Corporation. Foxit PDF Reader and PDF Editor have an operating system command injection vulnerability that originated in Foxit PDF Reader and PDF Editor before 11.1 on macOS that allows remote attackers to exploit the vulnerability to...

PT-2021-24209 · Unknown · Simple Forum-Discussion System

Name of the Vulnerable Software and Affected Versions: Simple Forum-Discussion System version 1.0 Description: The issue affects the Simple Forum-Discussion System, allowing an attacker to retrieve all information from the database. This is possible due to multiple SQL injection vulnerabilities...

Engineers Online Portal 注入漏洞

Engineers Online Portal is open source an online portal . It is developed using PHP, MySQL database, HTML, CSS, Javascript, jQuery, Ajax, Bootstrap and some other libraries. A security vulnerability exists in Engineers Online Portal, which stems from the lack of protection and authentication of t...

Tuleap 注入漏洞

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management, and team collaboration.Enalean Tuleap suffers from an...