Lucene search
K

2783 matches found

CNVD
CNVD
added 2019/08/28 12:0 a.m.2 views

SQL injection vulnerability in the S_show parameter of the aj***.php page of the S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php page Sshow parameter SQL injection vulnerability, an attacker can use the vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/28 12:0 a.m.1 views

S-CMS government website builder system aj***.php page N_type parameter has SQL injection vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. S-CMS government website builder system aj.php page Ntype parameter there is a SQL injection vulnerability, an attacker can...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/09 12:0 a.m.2 views

Open-School SQL Injection Vulnerability

Open-School is a Web-based school management software. The software provides online fee collection, attendance and online library features. A SQL injection vulnerability exists in Open-School version 2.3 Community Edition and version 3.0, which stems from a lack of validation of externally entere...

9.8CVSS8.2AI score0.0152EPSS
Exploits1References1
CNVD
CNVD
added 2019/08/08 12:0 a.m.1 views

S-CMS in***.php page suffers from a SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/08/08 12:0 a.m.1 views

SQL Injection Vulnerability in TXEHR V15 lo***.aspx Page

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software development and service company. The same share human resources management system-TXEHR V15...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/07 12:0 a.m.1 views

SQL Injection Vulnerability in Several Parameters of ZZCMS Merchants Module

ZZCMS with product investment type template, you can quickly build product investment website. ZZCMS website builder system investment module multiple parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

SQL Injection Vulnerability in the Frontend of Medical Online Exam System of Nanjing Pinde Technology Co.

Nanjing Pintech medical online examination system enables users to realize the organization and management of online examination work. SQL injection vulnerability exists in the front-end of Nanjing Pinde Technology's medical online examination system, which can be exploited by attackers to obtain...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/05 12:0 a.m.2 views

cPanel SQL Injection Vulnerability (CNVD-2019-26253)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A SQL injection vulnerability exists in versions prior to cPanel 57.9999.54. The vulnerability stems from a lack of validation of...

10CVSS8.1AI score0.01635EPSS
Exploits0References1
OSV
OSV
added 2019/08/02 2:15 p.m.2 views

CVE-2017-18406

cPanel before 67.9999.103 allows SQL injection during eximstats processing SEC-276...

7.5CVSS5.8AI score0.00855EPSS
Exploits0References2
CNVD
CNVD
added 2019/07/25 12:0 a.m.1 views

SQL Injection Vulnerability in VANOC Enterprise Website Management System Backend

Vanno enterprise website management system PHP version is a php+MySQL development of php enterprise website management system. VANOC enterprise website management system backend has SQL injection vulnerability, attackers can exploit the vulnerability to obtain database information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/07/25 12:0 a.m.0 views

SQL Injection Vulnerability in Shenzhen Belly Technology's Website Building System

Belly Technology is an innovative company that specializes in web application technology development services, as well as visual design. Shenzhen Belly Technology website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/07/18 12:0 a.m.1 views

SQL Injection Vulnerability in Fiberhome's Eyeshot Series of Network Video Surveillance Platforms

Eyeshot series network video surveillance platform is an integrated video surveillance management system developed by Fiberhome Zongzhi based on IP network technology as the core of large-scale image remote monitoring, transmission, storage and management. Fiberhome Eyeshot series network video...

8AI score
Exploits0
CNVD
CNVD
added 2019/07/16 12:0 a.m.1 views

SQL Injection Vulnerability in DBShop System

DBShop is an e-commerce system. A SQL injection vulnerability exists in the DBShop system, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
OSV
OSV
added 2019/07/15 1:15 p.m.2 views

CVE-2019-1010034

Deepwoods Software WebLibrarian 3.5.2 and earlier is affected by: SQL Injection. The impact is: Exposing the entire database. The component is: Function "AllBarCodes" defined at databasecode.php line 1018 is vulnerable to a boolean-based blind sql injection. This function call can be triggered by...

6.5CVSS6.7AI score0.01427EPSS
Exploits1References2
CNVD
CNVD
added 2019/07/14 12:0 a.m.1 views

SQL Injection Vulnerability in Hongyuan Business CMS

Laiyang Hongyuan E-commerce technology is mainly engaged in enterprise website construction, product promotion, enterprise information management consulting, planning, implementation and other services. Hongyuan Business CMS has SQL injection vulnerability, attackers can use the vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/07/12 12:0 a.m.1 views

SQL injection vulnerability in the pr***-sh***.asp file of Yueqing Hanke's website builder system.

Yueqing Hanke Network is a company engaged in website construction. A SQL injection vulnerability exists in the pr-sh.asp file of the website building system of Yueqing Hanke Network. Attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/07/09 12:0 a.m.1 views

SQL Injection Vulnerability in Electronic Service System V2.0 of Gansu Chengxing Information Technology Co.

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic service...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/07/04 12:0 a.m.0 views

SQL Injection Vulnerability in Beijing Night Cat Website Building System

Beijing Nightcats Tiancheng Network Technology Co., Ltd referred to as Nightcats Network, is a professional website design and website construction service provider. There is a SQL injection vulnerability in Beijing Nightcats website building system, which can be exploited by attackers to obtain...

8AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/07/04 12:0 a.m.19 views

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to address the issue of eliminating special elements used in SQL queries. This allows a violator to obtain the contents of the database.

The vulnerability in the platform for creating a unified database and electronic registration of residential properties, “BAR.- ”, exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow an attacker, operating remotely...

7.8CVSS5.6AI score
Exploits0Affected Software1
OSV
OSV
added 2019/06/11 10:29 p.m.3 views

CVE-2019-12149

SQL injection vulnerability in silverstripe/restfulserver module 1.0.x before 1.0.9, 2.0.x before 2.0.4, and 2.1.x before 2.1.2 and silverstripe/registry module 2.1.x before 2.1.1 and 2.2.x before 2.2.1 allows attackers to execute arbitrary SQL commands...

9.8CVSS7.5AI score0.01355EPSS
Exploits0References1
Rows per page
Query Builder