Lucene search
K

2828 matches found

CNNVD
CNNVD
added 2024/04/01 12:0 a.m.2 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/configISCGroupTimePolicy.php file...

6.3CVSS7.9AI score0.00347EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/03/31 12:0 a.m.3 views

WordPress Plugin Easy Form Builder SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Easy Form Builder is...

8.5CVSS8.6AI score0.00488EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/03/29 12:0 a.m.3 views

WordPress Plugin Download Monitor SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

7.6CVSS7.6AI score0.00609EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.3 views

PT-2024-23416

Name of the Vulnerable Software and Affected Versions Metagauss ProfileGrid versions through 5.7.8 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

9.8CVSS9.1AI score0.02267EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2024/03/29 12:0 a.m.3 views

PT-2024-22956 · Tongtianxing Technology Co. · Cmsv6

Name of the Vulnerable Software and Affected Versions: Tongtianxing Technology Co., Ltd CMSV6 versions 7.31.0.2 through 7.31.0.3 Description: The issue allows a remote attacker to escalate privileges and obtain sensitive information via the ids parameter. This is a SQL Injection vulnerability...

9.8CVSS8.2AI score0.00608EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/03/28 12:0 a.m.2 views

PT-2024-15936 · WordPress · Wp Erp

Name of the Vulnerable Software and Affected Versions: WP ERP | Complete HR solution with recruitment & job listings | WooCommerce CRM & Accounting plugin for WordPress versions up to, and including, 1.12.9 Description: The issue is related to time-based SQL Injection via the id parameter in the...

7.2CVSS9.6AI score0.00547EPSS
Exploits0References9
OSV
OSV
added 2024/03/27 3:15 a.m.2 views

CVE-2024-2945

A vulnerability was found in Campcodes Online Examination System 1.0. It has been classified as critical. Affected is an unknown function of the file /adminpanel/admin/faceboxmodal/updateExaminee.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack...

6.5CVSS5.7AI score
Exploits0References4
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.4 views

Online Book System SQL注入漏洞

Online Book System is an online booking system. A SQL injection vulnerability exists in code-projects Online Book System version 1.0, which originates from a SQL injection vulnerability in the value parameter of the /Product.php file...

9.8CVSS7AI score0.00766EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.3 views

Online Book System SQL注入漏洞

Online Book System is an online booking system. A SQL injection vulnerability exists in Online Book System version 1.0, which originates from a lack of validation of externally entered SQL statements in the ID parameter of the /description.php file. An attacker can exploit this vulnerability to...

9.8CVSS8.1AI score0.00822EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.3 views

Online Chatting System 1.0 SQL注入漏洞

Online Chatting System is an online chatting system. A SQL injection vulnerability exists in Online Chatting System version 1.0, which originates from the parameter id of the file admin/updateroom.php that lacks validation of externally entered SQL statements. An attacker can exploit this...

7.5CVSS8.2AI score0.00644EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.3 views

Online Examination System SQL注入漏洞

SourceCodester Online Examination System is an online examination system from SourceCodester, Inc. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /adminpanel/admin/query/deleteExamExe.ph...

6.5CVSS7AI score0.00512EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/03/27 12:0 a.m.2 views

Online Examination System SQL注入漏洞

Online Examination System is an online examination system. A SQL injection vulnerability exists in Online Examination System version 1.0, which originates from the id parameter of the /adminpanel/admin/query/deleteQuestionExe.php file that lacks validation of externally entered SQL statements. An...

6.5CVSS8.2AI score0.00512EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/03/27 12:0 a.m.5 views

PT-2024-23214 · Sourcecodester · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Subscription Website version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Subscription Website, affecting an unknown functionality of the file manage plan.php. The manipulation of the ...

8.8CVSS8.4AI score0.00675EPSS
Exploits1References9
CNNVD
CNNVD
added 2024/03/25 12:0 a.m.2 views

PHP Task Management System 安全漏洞

SourceCodester Task Management System is a task management system. A security vulnerability exists in PHP Task Management System version 1.0, which stems from the deletion of the administrator user function being vulnerable to SQL injection attacks...

9.8CVSS7.9AI score0.0093EPSS
Exploits2References2
OSV
OSV
added 2024/03/21 10:15 p.m.1 views

CVE-2024-28891

SQL injection vulnerability exists in the script HandlerCFG.ashx...

8.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/03/21 12:0 a.m.3 views

meshery SQL注入漏洞

meshery is a software application. A multi-service grid management plane that provides lifecycle, configuration and performance management of service grids and their workloads. Meshery version v0.6.181 suffers from a SQL injection vulnerability that originates from allowing remote attackers to...

7.5CVSS7.7AI score0.00951EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/03/21 12:0 a.m.4 views

PT-2024-23099 · Unknown · Sentrifugo

Name of the Vulnerable Software and Affected Versions: Sentrifugo version 3.2 Description: A SQL injection vulnerability exists in Sentrifugo, allowing a remote user to send a specially crafted query to the server and extract all the data from it. This issue is related to the...

9.8CVSS7.5AI score0.00874EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.4 views

Campcodes Online Job Finder System Security Vulnerability

Campcodes Online Job Finder System is an online job finder system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which results from an SQL injection vulnerability in the useremail parameter of the /admin/login.php file...

6.5CVSS8AI score0.00582EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/03/20 12:0 a.m.5 views

WordPress Plugin Advanced Form Integration Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.1CVSS7.7AI score0.01653EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.4 views

PT-2024-21483 · Unknown · Campcodes Online Job Finder System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A critical vulnerability was found in the Campcodes Online Job Finder System. The issue affects an unknown functionality of the file /admin/user/index.php. The manipulation of the id...

6.5CVSS7.2AI score0.00601EPSS
Exploits1References8
Rows per page
Query Builder