Lucene search
K

2784 matches found

OSV
OSV
added 2022/10/28 3:15 p.m.2 views

CVE-2021-37782

Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2022/10/28 3:15 p.m.2 views

CVE-2021-38737

SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...

9.8CVSS5.8AI score0.00798EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/10/28 12:0 a.m.2 views

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntMessage.php...

9.8CVSS8.5AI score0.00748EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/28 12:0 a.m.3 views

seccome Ehoney 安全漏洞

seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack/falco in the unknown function of the parameter Payload operation lead...

9.8CVSS8.4AI score0.00439EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/10/27 12:0 a.m.3 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...

8.8CVSS8.2AI score0.07686EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/10/26 12:0 a.m.3 views

eLearning System 安全漏洞

eLearning System is an eLearning System by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of eLearning System, which stems from a sql injection vulnerability due to incorrect manipulation of the parameter id...

9.8CVSS6.9AI score0.00973EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/10/25 12:0 a.m.2 views

WordPress plugin Form Maker by 10Web SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

7.2CVSS7.2AI score0.01015EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/10/25 12:0 a.m.3 views

WordPress plugin WP All Export Pro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

8.8CVSS8.1AI score0.00945EPSS
Exploits2References2
NCSC
NCSC
added 2022/10/19 12:0 a.m.1 views

Vulnerabilities fixed in Wordpress

Several vulnerabilities have been fixed in Wordpress. The vulnerabilities allow a malicious person to carry out attacks execute attacks that lead to the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site Scripting XSS SQL Injection Accessing sensitive data Wordpress...

7AI score
Exploits0
CNNVD
CNNVD
added 2022/10/18 12:0 a.m.2 views

Changing Information Technology RAVA certificate validation system SQL注入漏洞

Changing Information Technology RAVA certificate validation system Panorama Software RAVA certificate validation system website is a credential validation system from China-based Changing Information Technology. The Panorama Software RAVA certificate validation system suffers from a SQL injection...

9.8CVSS8.7AI score0.0076EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/10/17 12:0 a.m.3 views

Open Source SACCO Management System SQL注入漏洞

Open Source SACCO Management System is an open source SACCO management system by Mayuri K. Individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which can be exploited by an attacker to perform SQL injection via its /saccoshield/managepayment.php...

7.2CVSS7.3AI score0.00821EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/10/17 12:0 a.m.5 views

PT-2022-20682 · WordPress · Search Logger

Name of the Vulnerable Software and Affected Versions: Search Logger WordPress plugin versions 0.9 and earlier Description: The issue is related to a SQL injection problem. It occurs because a parameter is not properly sanitised and escaped before being used in a SQL statement. This can be...

7.2CVSS7.1AI score0.00921EPSS
Exploits2References4
CNNVD
CNNVD
added 2022/10/13 12:0 a.m.4 views

Human Resource Management System 安全漏洞

Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an SQL injection caused by some unknown functions in its getstatecity.php component that operate on the...

6.3CVSS5.5AI score0.00475EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/10/12 12:0 a.m.4 views

PT-2022-22299 · Sourcecodester · Sourcecodester Human Resource Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Human Resource Management System affected versions not specified Description: A critical issue was found in the SourceCodester Human Resource Management System, affecting an unknown function of the file getstatecity.php. The...

6.5CVSS6.7AI score0.00479EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.3 views

CVE-2022-40825

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php wherein function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0089EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/10/07 11:15 a.m.3 views

CVE-2022-40824

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwhere function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS7.5AI score0.0089EPSS
Exploits1References3
OSV
OSV
added 2022/10/07 11:15 a.m.3 views

CVE-2022-40824

B.C. Institute of Technology CodeIgniter =3.1.13 is vulnerable to SQL Injection via system\database\DBquerybuilder.php orwhere function. Note: Multiple third parties have disputed this as not a valid vulnerability...

9.8CVSS5.9AI score
Exploits0References2
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.3 views

CodeIgniter SQL注入漏洞

CodeIgniter is an open source web framework written in PHP. A SQL injection vulnerability exists in CodeIgniter version 3.1.13 and earlier versions, which stems from a SQL injection problem in the orhaving method in the systemdatabaseDBquerybuilder.php location...

9.8CVSS8.5AI score0.0089EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.4 views

Open Source SACCO Management System SQL注入漏洞

Open Source SACCO Management System is an open source SACCO management system by Mayuri K. Individual developer. An SQL injection vulnerability exists in Open Source SACCO Management System v1.0, which originates from a security issue with the id parameter of...

7.2CVSS7.3AI score0.00726EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/10/03 12:0 a.m.4 views

Veritas NetBackup SQL注入漏洞

Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection for metadata, virtual environments, and other environmental data. A SQL injection...

9.8CVSS8.4AI score0.00497EPSS
Exploits0References2
Rows per page
Query Builder