3577 matches found
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
Spring Cloud Gateway...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
CVE-2022-22947RceExp Spring Cloud Gateway 远程代码执行漏洞Exp Spring...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
cve-2022-22947 p...
MingSoft Mcms SQL注入漏洞
MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms v5.2.4 that allows attackers to conduct SQL injection attacks via the search.do parameter in the file /mdiy/dict/listExcludeApp. No details of the vulnerabilit...
CVE-2022-26171
Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter...
Auto Spare Parts Management SQL注入漏洞
Auto Spare Parts Management is an automated spare parts management system. auto spare parts management is vulnerable to SQL injection and no detailed vulnerability details are available at this time...
Cybonet PineApp Mail Secure SQL注入漏洞
Cybonet PineApp Mail Secure is Cybonet Israel's solution for blocking most malicious email threats at the network perimeter, while providing a range of additional options for comprehensive security and messaging control.Cybonet PineApp Mail Relay is vulnerable to a SQL injection vulnerability tha...
cron-utils: template Injection leading to unauthenticated Remote Code Execution
A flaw was found in cron-utils. This flaw allows an attacker to perform unauthenticated Remote Code Execution RCE via Java Expression Language EL injection...
CVE-2022-25322
ZEROF Web Server 2.0 allows /HandleEvent SQL Injection...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
l4srs Rust implementation of the Log 4 Shell log 4 j - CVE-20...
CVE-2022-23902
Tongda2000 v11.10 was discovered to contain a SQL injection vulnerability in exportdata.php via the dname parameter...
GHSA-WFJ5-2MQR-7JVV Expression Language Injection in Netflix Conductor
Netflix Conductor uses Java Bean Validation JSR 380 custom constraint validators. When building custom constraint violation error messages, different types of interpolation are supported, including Java EL expressions. If an attacker can inject arbitrary data in the error message template being...
TSG Tokheim Profleet DiaLOG Fuel Management System SQL注入漏洞
TSG Tokheim Profleet DiaLOG Fuel Management System is a fuel management system from TSG UK.A SQL injection vulnerability exists in TSG Tokheim Profleet DiaLOG Fuel Management System, which can be exploited by attackers to cause remote code execution as root user...
log4j: SQL injection in Log4j 1.x when application is configured to use JDBCAppender
A flaw was found in the Java logging library Apache Log4j in version 1.x. JDBCAppender in Log4j 1.x is vulnerable to SQL injection in untrusted data. This allows a remote attacker to run SQL statements in the database if the deployed application is configured to use JDBCAppender with certain...
Synology DiskStation Manager SQL注入漏洞
Synology DiskStation Manager DSM is an operating system used on network storage servers NAS by Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in Synology DiskStation Manager, which stems from the failure of the product's Security Management feature to handle special characte...
PT-2022-9669
Name of the Vulnerable Software and Affected Versions Paid Memberships Pro WordPress plugin versions prior to 2.6.7 Description The issue concerns a SQL injection problem. It occurs because the discount code is not properly escaped before being used in a SQL statement, specifically in one of the...
Airspan Networks Mmp SQL注入漏洞
Airspan Networks Mmp is an advanced standalone network management software platform for Mimosa fixed wireless devices from Airspan Networks, Inc. Airspan Networks Mmp is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection and obtain sensitive information...
Victor CMS SQL注入漏洞
Victor CMS is an open source content management system from the individual developers of Victor Alagwu in Nigeria. victor CMS has a SQL injection vulnerability in v1.0, which stems from the lack of validation of externally entered SQL statements in database-based applications. An attacker could...
Online Motorcycle (Bike) Rental System SQL注入漏洞
Online Motorcycle Bike Rental System is an online motorcycle bike rental system by the individual developer Carlo Montero. A security vulnerability in Online Motorcycle Bike Rental System 1.0 could allow an attacker to perform a time-based SQL blind injection via the login portal...