Lucene search
+L

3884 matches found

CNVD
CNVD
•added 2019/11/15 12:00 a.m.•5 views

Shenzhen Tiandixin Network Technology Co., Ltd. website building system has SQL injection vulnerability

Tiandixin network was founded in 2010, is a strategic research and development-oriented enterprises, many large-scale project experience, more than tens of thousands of Chinese enterprises common choice of website platform builder, the company mainly focuses on corporate website construction, Bai...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/14 12:00 a.m.•16 views

SQL Injection Vulnerability in Kaixin Quote System V2.0 da***.aspx Page

The QI Quotation System is primarily for use by manufacturing companies. For incoming BOM list price monitoring. The system will automatically record the past quoted prices of BOM products, so that the purchasing staff can easily give new quotes. A SQL injection vulnerability exists in the Qixing...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/11 12:00 a.m.•7 views

SQL injection vulnerability in the ad***.php page of Tuan ah VIP movie system (CNVD-2019-43831)

Tuan ah VIP movie system is a set of VIP movie video viewing website with registered member agent version. A SQL injection vulnerability exists in the ad.php page of Tuan Ah VIP Movie System, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/05 12:00 a.m.•18 views

ARP-GUARD SQL Injection Vulnerability

ARP-GUARD is a network access control solution. A SQL injection vulnerability exists in ARP-GUARD version 4.0.0-5. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications and can be exploited by an attacker to execute illegal SQL...

9.8CVSS8.2AI score0.01428EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/11/04 12:00 a.m.•7 views

SQL Injection Vulnerability in PHPMyWind Website Building System (CNVD-2019-43878)

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . There is a SQL injection vulnerability in the PHPMyWind website builder system, which can be exploited by an attacker to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/11/04 12:00 a.m.•7 views

SQL injection vulnerability in seacms backend (CNVD-2019-43682)

Ocean CMS seacms is a video-on-demand system based on PHP+MySql technology. There is a SQL injection vulnerability in the backend of seacms, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/29 12:00 a.m.•7 views

Waychar enrollment system suffers from SQL injection vulnerability (CNVD-2019-43613)

Waychar Enrollment System is a PHP/MYSQL based enrollment system. Waychar Enrollment System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/28 12:00 a.m.•21 views

YouPHPTube SQL Injection Vulnerability (CNVD-2020-20385)

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL...

8.8CVSS8.2AI score0.00847EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/10/25 12:00 a.m.•9 views

TpShop Go***.php page fi*** parameter has SQL injection vulnerability

Tpshop is an open source mall system of Shenzhen SoBao Network Co. TpShop Go.php page fi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/25 12:00 a.m.•9 views

Anhui Siwatu Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Hefei Siwatu network technology limited liability company is mainly engaged in software development, computer graphics production, network cabling, computer installation and maintenance, website production, maintenance, promotion, graphic design, domain name service. Anhui Siwatu Network Technolo...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/25 12:00 a.m.•6 views

Xiamen Yi Shang Network Technology website building system SQL injection vulnerability

Xiamen Yi Shang Network Technology Co., Ltd. is one of the Internet application service providers; is a commitment to enterprise e-commerce consulting and solutions and enterprise information technology services, a professional IT company, with a number of products and services related to the...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/24 12:00 a.m.•12 views

SQL Injection Vulnerability in kkcms

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/21 12:00 a.m.•19 views

WiKID Systems 2FA Enterprise Server searchDevices.jsp SQL Injection Vulnerability

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A SQL injection vulnerability exists in WiKID Systems 2FA Enterprise Server searchDevices.jsp, which can be exploited by an attacker to submit a specially crafted SQL request to manipulate a databas...

8.8CVSS8.3AI score0.02143EPSS
SaveExploits3References1
CNVD
CNVD
•added 2019/10/15 12:00 a.m.•30 views

WordPress wpDataTables Lite SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wpDataTables Lite is a chart creation plugin used in it. WordPress wpDataTables Lite has a SQL injection vulnerability. The...

7.2CVSS8AI score0.01447EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/14 12:00 a.m.•11 views

SQL injection vulnerability in c***w.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.5AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2019/10/11 10:08 a.m.•37 views

CVE-2018-14667

The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language EL injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData...

9.8CVSS5.4AI score0.74202EPSS
SaveExploits8References2
CNVD
CNVD
•added 2019/10/10 12:00 a.m.•9 views

SQL injection vulnerability in c**e.asp of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/08 12:00 a.m.•8 views

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/07 12:00 a.m.•6 views

SQL Injection Vulnerability in Website Building System of Zigong Tianqi Network System Co.

Zigong Tianqi Network System Co., Ltd. was founded in 1999, the company is committed to network construction. There is a SQL injection vulnerability in the website building system of Zigong Tianqi Network System Co., Ltd, which can be exploited by attackers to obtain sensitive information from th...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/06 12:00 a.m.•8 views

SQL Injection Vulnerability in Business-to-Business Website Building System

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

7.6AI score
SaveExploits0
Rows per page
Query Builder