4558 matches found
Sql injection
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component newsNews.phphy...
Sql injection
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceTopic.phpdel...
Sql injection
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceDance.phpdel...
Sql injection
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component danceDance.phphy...
CVE-2022-27367
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceTopic.phpdel...
CVE-2022-27367
Summary of CVE-2022-27367 (Cscms Music Portal System v4.2): A SQL injection vulnerability exists in the Dance_Topic.php_del component of Cscms Music Portal System v4.2. The vulnerability arises from improper handling of input in the affected function, enabling injection attacks against the databa...
CVE-2022-27369
The CVE-2022-27369 entry concerns Cscms Music Portal System v4.2, with a SQL injection vulnerability in the news_News.php_hy component. The Red Hat, CNVD, CNVD/CNNVD, NVD, and related records consistently describe the same issue: an SQL injection flaw in News-related functionality of Cscms Music ...
CVE-2022-27369
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component newsNews.phphy...
CVE-2022-27368
The CVE-2022-27368 entry applies to Cscms Music Portal System v4.2 and describes a SQL injection vulnerability in the dance_Lists.php_zhuan component. The available connected records consistently identify the affected product and vulnerable function but do not provide exploit details, affected ve...
CVE-2022-27368
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceLists.phpzhuan...
CVE-2022-27365
CVE-2022-27365 affects Cscms Music Portal System v4.2, with a SQL injection vulnerability exploitable via the dance_Dance.php_del component. Connected sources (NVD/Red Hat/CNVD/etc.) corroborate a SQLi flaw in CScms that can enable unauthorized data exposure or modification through the vulnerable...
CVE-2022-27365
Cscms Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the component danceDance.phpdel...
CVE-2022-27366
CVE-2022-27366 affects Cscms Music Portal System v4.2, with a blind SQL injection vulnerability exploitable via the dance_Dance.php_hy component. The Red Hat and CNVD entries corroborate the flaw as a SQL injection in Cscms, impacting the CMS framework’s dance_Dance.php_hy routine. Public details...
CVE-2022-27366
Cscms Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the component danceDance.phphy...
CScms SQL注入漏洞
CScms is a content management system CMS developed based on the CI framework.Cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceDance.phphy...
CScms SQL注入漏洞
CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceTopic.phpdel...
CScms SQL注入漏洞
CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component danceLists.phpzhuan...
Musical World 1 Shell Upload Exploit
Musical-World-Unrestricted-File-Upload-RCE-POC Author: D4rkP0w4r Note Login to client. don't need login to admin Description Upload web shell at UploadedSongs Step to Reproduct Login to user - TRACK - UploadedSongs - Choose File - UPLOAD - access /songs/uploadedsongs/shell.php Exploit When upload...
CVE-2021-30333
Improper validation of buffer size input to the EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2021-35106
Possible out of bound read due to improper length calculation of WMI message. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...