Lucene search
+L

39 matches found

CNNVD
CNNVD
added 2024/03/21 12:0 a.m.9 views

Netentsec NS-ASG Application Security Gateway SQL注入漏洞

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version v.6.3.1, which can be exploited to allow a local attacker to execute arbitrary code and obtain...

7.8CVSS8AI score0.00329EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/21 12:0 a.m.16 views

CVE-2024-28521

SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component...

8.3AI score0.00329EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/17 12:0 a.m.8 views

PT-2023-32812 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3.1 Description: A critical issue has been found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /admin/singlelogin.php?submit=1 and is related to the...

9.8CVSS7.7AI score0.00711EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2022/07/01 9:15 p.m.2 views

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

9.8CVSS5.7AI score0.01537EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/07/01 9:15 p.m.6 views

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

9.8CVSS5.7AI score0.07476EPSS
SaveExploits1References3
OSV
OSV
added 2022/07/01 9:15 p.m.8 views

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

9.8CVSS5.8AI score0.01537EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/01 9:15 p.m.9 views

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

9.8CVSS5.8AI score0.07476EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/01 9:15 p.m.23 views

CVE-2022-32094

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php...

9.8CVSS0.07476EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2022/07/01 8:57 p.m.32 views

CVE-2022-32093

Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at adminlogin.php...

10AI score0.01537EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/07/01 12:0 a.m.9 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to an SQ injection vulnerability that originates in the doctorlogin.php page. A SQL...

9.8CVSS5.9AI score0.07476EPSS
SaveExploits1References2
myhack58
myhack58
added 2013/03/31 12:0 a.m.20 views

SynConnect 2.0 the presence of SQL injection vulnerabilities-vulnerability warning-the black bar safety net

SynConnect in the loginid parameter in the presence ofSQL injectionvulnerability that stems from the program using SQL before the query is not adequately verify user-supplied input. An attacker exploit the vulnerability to manipulate the application, access or modify data, or the use of the...

7.6AI score
SaveExploits0
NVD
NVD
added 2013/03/28 11:55 p.m.20 views

CVE-2013-2690

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

7.5CVSS8.3AI score0.02514EPSS
SaveExploits2References7
Prion
Prion
added 2013/03/28 11:55 p.m.13 views

Sql injection

SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action...

7.5CVSS9.1AI score0.02514EPSS
SaveExploits2References7Affected Software1
CVE
CVE
added 2013/03/28 11:0 p.m.50 views

CVE-2013-2690

CVE-2013-2690 is a SQL injection vulnerability in the SynConnect 2.0 login flow of Synchroweb Technology. The flaw affects index.php where an attacker can manipulate the loginid parameter in a logoff action to execute arbitrary SQL commands. Reported in NVD with a base score of 7.5 (HIGH) and net...

7.5CVSS8.6AI score0.02514EPSS
SaveExploits2References7Affected Software1
NVD
NVD
added 2011/11/02 9:55 p.m.23 views

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

7.5CVSS8.3AI score0.01046EPSS
SaveExploits2References5
ATTACKERKB
ATTACKERKB
added 2011/11/02 9:55 p.m.3 views

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

7.5CVSS6.4AI score0.01046EPSS
SaveExploits2References6
Cvelist
Cvelist
added 2011/11/02 9:0 p.m.31 views

CVE-2010-5039

SQL injection vulnerability in control/adminlogin.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter aka the UserName field. NOTE: some of these details are obtained from third party information...

8.3AI score0.01046EPSS
SaveExploits2References5
NVD
NVD
added 2007/08/08 10:17 p.m.27 views

CVE-2007-4239

Cross-site scripting XSS vulnerability in user/forgotPassStep2.jsp in the admin interface in C-SAM oneWallet 21007062007;1.0 allows remote attackers to inject arbitrary web script or HTML via the loginID parameter...

4.3CVSS5.7AI score0.01062EPSS
SaveExploits1References3
Prion
Prion
added 2007/08/03 9:17 p.m.19 views

Sql injection

Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via 1 the id parameter to member.php in a page action, related to a SELECT statement in common.php; and the 2 loginid parameter uid variable, and possibly the 3 pwd parameter, to...

7.5CVSS9.3AI score0.01264EPSS
SaveExploits1References7
Rows per page
Query Builder