403 matches found
CSCMS Music Portal System SQL注入漏洞
CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter of /admin.php/news/admin/news/save validation of external input...
CSCMS Music Portal System SQL注入漏洞
CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...
CSCMS Music Portal System SQL注入漏洞
CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which stems from the lack of validation of the id parameter of /admin.php/pic/admin/type/del against external...
CSCMS Music Portal SystemSQL注入漏洞
CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing id parameter of /admin.php/news/admin/topic/save validation of external inpu...
CSCMS Music Portal System SQL注入漏洞
CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in CSCMS Music Portal System, which can be exploited by attackers to execute illegal SQL commands...
Cybozu Garoon 安全漏洞
Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other features. A security vulnerability exists in Cybozu Garoon, which is caused due to the discovery of a browsing restriction...
CVE-2022-28410
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...
CVE-2022-28029
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...
Sql injection
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...
Sql injection
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...
CVE-2022-28028
The CVE-2022-28028 entry concerns Simple Real Estate Portal System v1.0, which contains a SQL injection vulnerability in the parameter /reps/classes/Master.php?f=delete_amenity. Connected documents corroborate the issue across multiple sources, and CVSS v3.1 scores indicate a CRITICAL severity (9...
CVE-2022-28029
CVE-2022-28029 affects Simple Real Estate Portal System v1.0. The vulnerability is a SQL injection in the endpoint /reps/classes/Master.php?f=delete_type, as reported across multiple trusted sources. The NVD entry lists high/critical impact (C/P/I/A) with network attack vector and no authenticati...
CVE-2022-28030
CVE-2022-28030 applies to Simple Real Estate Portal System v1.0. The vulnerability is a SQL injection via the endpoint /reps/classes/Master.php?f=delete_estate, affecting the app’s database interaction. The CVSS metrics indicate high to critical impact (CVSS‑2: Confidentiality/Integrity/Availabil...
CVE-2022-28410
The CVE-2022-28410 entry corresponds to a SQL injection in Simple Real Estate Portal System v1.0, exploitable via /reps/classes/Users.php?f=delete_agent. The connected documents confirm the affected software/component (Simple Real Estate Portal System v1.0) and the root cause (SQL injection). Exp...
CVE-2022-28411
CVE-2022-28411 affects Simple Real Estate Portal System v1.0. The vulnerability is a SQL injection exploitable via /reps/admin/?page=agents/manage_agent, as documented across multiple sources (CNVD, NVD, Red Hat, etc.). CVSS indicates a high/critical impact (CVSS v3.1: 9.8, network vector, no aut...
CScms SQL Injection Vulnerability (CNVD-2022-33153)
CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceTopic.phpdel...
CScms SQL Injection Vulnerability (CNVD-2022-33154)
CScms is a content management system CMS developed based on the CI framework.Cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers to conduct injection attacks via the component danceDance.phphy...
CScms SQL Injection Vulnerability (CNVD-2022-33152)
CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component danceLists.phpzhuan...