Lucene search
+L

671 matches found

CNVD
CNVD
•added 2020/03/05 12:00 a.m.•7 views

SQL injection vulnerability in the ne***_sh***.php page of the Handan Love Help You Do website building system

Handan Love Helps You Do is the first serious and professional marriage agency in Handan. SQL injection vulnerability exists in the nesh.php page of the Handan Love Help You Do website building system, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2020/02/18 12:00 a.m.•77 views

ELTEX NTP-RG-1402G Operating System Command Injection Vulnerability

ELTEX NTP-RG-1402G is a router product from the Russian company ELTEX. An operating system command injection vulnerability exists in the ELTEX NTP-RG-1402G 1v10 version 3.25.3.32. The vulnerability stems from a network system or product not properly filtering special characters, commands, etc. fr...

10CVSS7.9AI score0.03059EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/12/11 12:00 a.m.•11 views

EyouCms suffers from SQL injection vulnerability (CNVD-2020-02271)

EyouCms is a free + open source enterprise content management system developed on the core of TP5.0 framework. EyouCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

7.7AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2019/12/10 4:12 p.m.•48 views

Amazon's Blink Smart Security Cameras Open to Hijack

Multiple high-severity vulnerabilities have been discovered in Amazon-owned Blink XT2 security camera systems, which if exploited could give attackers complete control over them. The internet of things IoT cameras not to be confused with the Blink open-source browser engine, consist of a wireless...

10CVSS8.6AI score0.03769EPSS
SaveExploits7References8
CNVD
CNVD
•added 2019/12/09 12:00 a.m.•14 views

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/12/03 12:00 a.m.•5 views

SQL Injection Vulnerability in Guangzhou Yuejian Sanhe Software Co.

Guangzhou Yuejian Sanhe Software Co., Ltd. was founded in 1995, mainly engaged in the research and development, sales and service of "urban construction and management" software. A SQL injection vulnerability exists in the website building system of Guangzhou Yuejian Sanhe Software Co., Ltd, whic...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/12/03 12:00 a.m.•8 views

Xingtai Tenghe Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xingtai Tenghe Network Technology Co., Ltd. is a company that provides comprehensive Internet solutions. Xingtai Tenghe Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive server information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/26 12:00 a.m.•6 views

WebOA network office automation software suffers from SQL injection vulnerability (CNVD-2019-45143)

WebOA network office automation software is an office software that allows company employees to download and upload shared information through a browser. A SQL injection vulnerability exists in WebOA Network Office Automation Software. An attacker can exploit the vulnerability to obtain sensitive...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/11 12:00 a.m.•7 views

SQL Injection Vulnerability in Ectouch Gr***.cl***.php Page

ECTouch is Shanghai Shangchuang Network Technology Co., Ltd. launched a set of PHP and MySQL database based on the construction of open source and easy to use mobile mall store system. A SQL injection vulnerability exists in the Ectouch Gr.cl.php page, which can be exploited by attackers to obtai...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/22 12:00 a.m.•9 views

SQL Injection Vulnerability in MyuCMS us***_xi***.html Page

MyuCMS is a content management system, based on php development. SQL injection vulnerability exists in MyuCMS usxi.html page, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/19 12:00 a.m.•15 views

SQL injection vulnerability in yiqicms frontend pr***.php file

Yiqi CMS yiqicms is a content management system CMS for marketing-oriented enterprise websites. A SQL injection vulnerability exists in the yiqicms front-end pr.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/08/15 12:00 a.m.•17 views

WordPress ninja-forms plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. A SQL injection vulnerability exists in the WordPress ninja-forms plugin...

9.8CVSS8AI score0.01779EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2019/08/12 12:00 a.m.•30 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : wget Vulnerability (NS-SA-2019-0065)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has wget packages installed that are affected by a vulnerability: - A cookie injection flaw was found in wget. An attacker can create a malicious website which, when accessed, overrides cookies belonging to arbitrary domains...

6.5CVSS6.8AI score0.16787EPSS
SaveExploits5References2
CNVD
CNVD
•added 2019/08/05 12:00 a.m.•16 views

cPanel SQL Injection Vulnerability (CNVD-2019-26351)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in bin/hordeupdateusernames in cPanel versions prior to 11.54.0.4. The vulnerability stems...

8.1CVSS8.2AI score0.011EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/07/14 12:00 a.m.•16 views

Hubei Yibaitian Network Media Co., Ltd. website builder system has SQL injection vulnerability

YBTS Network Media operates computer software and hardware R&D business and Internet data business in Shanghai Telecom's Caobao Road/Wai Gao Qiao/Wusheng Road and other national server rooms. Hubei YBTS Network Media Co., Ltd. website building system has SQL injection vulnerability, attackers can...

8AI score
SaveExploits0
CNVD
CNVD
•added 2019/07/02 12:00 a.m.•15 views

Logitech R500 Injection Vulnerability

The Logitech R500 is a wireless laser presentation remote control from Logitech Switzerland. Logitech R500 suffers from an injection vulnerability. An attacker can exploit this vulnerability to inject keystrokes...

6.5CVSS7.3AI score0.00849EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/18 12:00 a.m.•16 views

MyBB SQL Injection Vulnerability (CNVD-2019-18513)

MyBB MyBulletinBoard is a free and Web-based forum software developed by MyBB team using PHP and MySQL. The software is characterized by its simplicity, multi-language support and extensibility. A SQL injection vulnerability exists in MyBB versions prior to 1.8.21. The vulnerability stems from a...

7.2CVSS8.2AI score0.01467EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/06/12 12:00 a.m.•10 views

SemCMS foreign trade website php version V3.8 suffers from SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCMS foreign trade website php version V3.8 version of the existence of SQL injection...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/26 12:00 a.m.•7 views

SQL injection vulnerability in Jommla!Po*** component (CNVD-2019-12554)

Joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the Jommla!Po component, which can be exploited by an attacker to obtain sensitive information from the database...

7.7AI score
SaveExploits0
OSV
OSV
•added 2019/03/25 7:29 p.m.•16 views

CVE-2019-7613

Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw. An attacker able to inject certain characters into a log entry could prevent Winlogbeat from recording the event...

7.5CVSS7.1AI score0.01324EPSS
SaveExploits0References2
Rows per page
Query Builder