3890 matches found
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from /admin.php?id=siteoptions&social=edit&sid=insid parameter missing validation of external input...
Student Grading System SQL注入漏洞
Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Simple Real Estate Portal System SQL注入漏洞
Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. Simple Real Estate Portal System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...
Sourcecodester Baby Care System SQL注入漏洞
Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=siteoptions&social=display&value=0&sid=midsid parameter missing validation of external...
Cisco Unified Communications Manager SQL注入漏洞
Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of the Unified Communications System from Cisco USA. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution.Unified Communications...
CVE-2022-27927
A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable coursecode and/or customernumber parameter...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 PoC for CVE-2021-31805 Apache Struts2 CVE-20...
Exploit for Expression Language Injection in Apache Struts
S2-062 CVE-2021-31805/s2-062 Batch scanning and vulnerability...
ALPINE-CVE-2022-26651
An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The funcodbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. Th...
Exploit for Expression Language Injection in Apache Struts
CVE-2021-31805 Remote code execution S2-062 CVE-2021-31805...
Exploit for Expression Language Injection in Apache Struts
s2-062 Remote code execution for S2-062 CVE-2021-31805 – Ver...
Exploit for Expression Language Injection in Apache Struts
s2-062 Remote code execution for S2-062 CVE-2021-31805 – Ver...
Asterisk SQL注入漏洞
Asterisk is a PBX system software that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols.Asterisk suffers from a SQL injection vulnerability that can be exploited by attackers to cause user-supplied data to create corrupt SQL queries or possibly SQL injections...
GHSA-V8J6-6C2R-R27C Expression Language Injection in Apache Struts
The fix issued for CVE-2020-17530 was incomplete. So from Apache Struts 2.0.0 to 2.5.29, still some of the tag’s attributes could perform a double evaluation if a developer applied forced OGNL evaluation by using the %... syntax. Using forced OGNL evaluation on untrusted user input can lead to a...
JHipster SQL注入漏洞
JHipster is an open source application builder that develops web applications and microservices primarily using Angular or React and Spring Framework.JHipster suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, whic...
CVE-2021-26114
Multiple improper neutralization of special elements used in an SQL command vulnerabilities in FortiWAN before 4.5.9 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests...
Exploit for Expression Language Injection in Vmware Spring_Cloud_Gateway
SpringCloud-Gateway Command Execution Vulnerability CVE-2022...
Exploit for Code Injection in Vmware Spring_Cloud_Gateway
SpringCloud-Gateway Command Execution Vulnerability CVE-2022...
