Lucene search
+L

166 matches found

Cvelist
Cvelist
•added 2022/07/14 12:39 p.m.•40 views

CVE-2022-30113

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

9.8AI score0.00807EPSS
SaveExploits0References2
CVE
CVE
•added 2022/07/14 12:39 p.m.•83 views

CVE-2022-30113

The CVE-2022-30113 entry concerns the Electronic mall system 1.0_build20200203, which is affected by a SQL Injection vulnerability. Public summaries in connected documents consistently identify the affected product/version and the vulnerability type, with an accompanying high-severity CVSS v3.1 s...

9.8CVSS9.5AI score0.00807EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/07/14 12:00 a.m.•6 views

PT-2022-20007

Name of the Vulnerable Software and Affected Versions Electronic mall system version 1.0 build20200203 Description The issue is related to SQL Injection. Recommendations For Electronic mall system version 1.0 build20200203, at the moment, there is no information about a newer version that contain...

9.8CVSS0.00807EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•9 views

CVE-2022-30113: Improper Neutralization of Special Elements used in an SQL Command

Electronic mall system 1.0build20200203 is affected vulnerable to SQL Injection...

9.8CVSS8.3AI score0.00807EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/14 12:00 a.m.•14 views

Electron SQL Injection Vulnerability

Electron is a personal developer of a user to write cross-platform desktop application JavaScript framework. The framework is based on nodejs and Chromium and can be used to write cross-platform desktop applications using HTML, CSS. A security vulnerability exists in Electronic mall system versio...

9.8CVSS8.5AI score0.00807EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/07/15 12:00 a.m.•79 views

ECTouch SQL Injection Vulnerability

ECTouch is an application. An open source mobile mall system to create an enterprise exclusive mobile mall. ECTouch suffers from a SQL injection vulnerability, which originates from the SQL injection vulnerability in ECTouch v2 generated through the integralmin parameter in index.php. An attacker...

9.8CVSS4.7AI score0.01138EPSS
SaveExploits1References1
NVD
NVD
•added 2021/06/29 5:15 p.m.•38 views

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

8.8CVSS0.01173EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/06/29 5:15 p.m.•22 views

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

8.8CVSS8.5AI score
SaveExploits0References1
CVE
CVE
•added 2021/06/29 4:56 p.m.•62 views

CVE-2020-21394

The CVE-2020-21394 entry applies to Zhongbang CRMEB Mall System (open source) v2.60 and v3.1, where SQL injection is possible through the tablename parameter in SystemDatabackup.php. The underlying issue is a SQL injection vulnerability that can lead to unauthorized SQL commands with high impact ...

8.8CVSS9.1AI score0.01173EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/06/29 4:56 p.m.•33 views

CVE-2020-21394

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

9.2AI score0.01173EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/29 12:00 a.m.•13 views

CVE-2020-21394: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Zhong Bang Technology Co., Ltd CRMEB mall system V2.60 and V3.1 via the tablename parameter in SystemDatabackup.php...

8.8CVSS5.9AI score0.01173EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/06/29 12:00 a.m.•5 views

PT-2021-10622

Name of the Vulnerable Software and Affected Versions: Zhong Bang Technology Co., Ltd CRMEB mall system versions 2.60 through 3.1 Description: The issue is related to a SQL Injection vulnerability. It can be exploited via the tablename parameter in the SystemDatabackup.php file. Recommendations:...

8.8CVSS0.01173EPSS
SaveExploits1References3
CNVD
CNVD
•added 2021/06/18 12:00 a.m.•44 views

Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system with command execution vulnerabilities

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . Jinan Ai Cheng Network Technology Co., Ltd. iWebShop open source mall system there is a command execution vulnerability , attackers can...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2021/06/17 12:00 a.m.•25 views

iWebShop open source mall system SQL injection vulnerability

iWebShop open source mall system is a PHP language and MYSQL database based on the development of B2B2C single-user and multi-user open source free mall system . iWebShop open source mall system SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2021/06/07 12:00 a.m.•8 views

Guangxi Guitian Energy Group Company Limited Guitian Gas Mall System Logic Flaw Vulnerability

Guangxi Guitian Energy Group Co., Ltd. is the main LPG comprehensive service enterprise in Guangxi. The products cover: service system, cylinder traceability system. It involves many industries such as gas station, LNG filling station, industrial gas station, chemical polymer new material...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2021/06/05 12:00 a.m.•6 views

Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains vulnerabilities

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. Zhejiang WoSmith Information Technology Co., Ltd. WoSmith list store mall system file contains a vulnerability that can be exploited to obtain server privileges...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2021/05/19 12:00 a.m.•12 views

XML Entity Injection Vulnerability in oscshop2 Backend

oscshop2 is an open source free B2C mall system designed using thinkphp5, including micro-channel cell phone, follow the Apache2 open source agreement release. oscshop2 backend XML entity injection vulnerability exists . Attackers can use the vulnerability to obtain sensitive information...

7.1AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/04/28 2:15 p.m.•20 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.8CVSS7.7AI score0.03789EPSS
SaveExploits1References1
Prion
Prion
•added 2021/04/28 2:15 p.m.•30 views

Sql injection

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

7.5CVSS9.9AI score0.03789EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/04/28 1:22 p.m.•57 views

CVE-2020-18020

SQL Injection in PHPSHE Mall System v1.7 allows remote attackers to execute arbitrary code by injecting SQL commands into the "userphone" parameter of a crafted HTTP request to the "admin.php" component...

9.9AI score0.03789EPSS
SaveExploits1References1
Rows per page
Query Builder