Lucene search
K

2783 matches found

CNVD
CNVD
added 2017/12/15 12:0 a.m.2 views

PHP Scripts Mall Freelance Website Script SQL Injection Vulnerability

PHP Scripts Mall Freelance Website Script is a set of PHP based freelance online job search, recruitment website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Freelance Website Script version 2.0.6. The vulnerability can be exploited to inject SQL...

9.8CVSS8.3AI score0.0305EPSS
Exploits1References1
CNVD
CNVD
added 2017/12/11 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Suzhou Leyi Network Technology Co.

Suzhou Leyi Network Technology Co., Ltd. is a network company specializing in enterprise website construction and e-commerce services, providing network promotion and marketing in one of the professional services. Suzhou Leyi Network Technology Co., Ltd. website building system SQL injection...

7.8AI score
Exploits0
CNVD
CNVD
added 2017/12/11 12:0 a.m.1 views

Dongguan Golden Drum Network Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Dongguan Golden Drum Network Technology Co., Ltd. is a network company, specializing in the field of website design and Internet marketing. Dongguan Golden Drum Network Technology Co., Ltd. website construction system has a SQL injection vulnerability, attackers can use the vulnerability to obtai...

7.6AI score
Exploits0
CNVD
CNVD
added 2017/12/10 12:0 a.m.1 views

SQL Injection Vulnerability in ThinkLC Classifieds Information System biz.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. A SQL injection vulnerability exists in the ThinkLC Classifieds Information System biz.php page. The vulnerability is caused due to the system failing to effectively filter user-submitte...

7.3AI score
Exploits0
CNVD
CNVD
added 2017/12/07 12:0 a.m.4 views

IBM Atlas eDiscovery Process Management SQL Injection Vulnerability

IBM Atlas eDiscovery Process Management is a product within the Information Lifecycle Governance solution from IBM USA that is used to help attorneys, paralegals, and evidence supervisors rigorously and logically manage legal evidence retention workflows. A SQL injection vulnerability exists in I...

8.8CVSS7.8AI score0.01436EPSS
Exploits0References1
CNVD
CNVD
added 2017/12/03 12:0 a.m.2 views

SQL Injection Vulnerability in DuoDuo Rebate System V8.3_UTF8 official version admin\mod\goods\list.act.php

DuoDuo rebate system is for e-commerce rebate, shopping guide to provide solutions, is the open source PHP rebate site system. DuoDuo rebate web system V8.3UTF8 official version admin\mod\goods\list.act.php SQL injection vulnerability. The vulnerability is due to the system failing to effectively...

7.6AI score
Exploits0
OSV
OSV
added 2017/11/30 9:29 a.m.2 views

CVE-2017-12364

A SQL Injection vulnerability in the web framework of Cisco Prime Service Catalog could allow an unauthenticated, remote attacker to execute unauthorized Structured Query Language SQL queries. The vulnerability is due to a failure to validate user-supplied input that is used in SQL queries. An...

6.5CVSS6AI score0.01301EPSS
Exploits0References3
CNVD
CNVD
added 2017/11/28 12:0 a.m.1 views

ShyPost Enterprise Management System suffers from SQL Injection Vulnerability

ShyPost Enterprise Management System is a set of intelligent ASP-based website building software. ShyPost Enterprise Management System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2017/11/24 12:0 a.m.2 views

Serendipity blog component SQL injection vulnerability

Serendipity is a PHP-based blogging system. The system supports the creation of online diaries, blogs, web pages, etc. blog component is one of the blogging components. A SQL injection vulnerability exists in the blog component in Serendipity version 2.0.3. A remote attacker can exploit this...

7.5CVSS8AI score0.01149EPSS
Exploits0References1
CNVD
CNVD
added 2017/11/21 12:0 a.m.1 views

Hefei Chenguang Electronic Technology Co., Ltd. website construction system multiple parameters exist SQL injection vulnerability

Hefei Chenguang Electronic Technology Co., Ltd. is a domestic Internet operation service provider with technical strength and rich experience in website construction and operation. Hefei Chenguang Electronic Technology Co., Ltd. website construction system has SQL injection vulnerability in sever...

8AI score
Exploits0
CNVD
CNVD
added 2017/11/11 12:0 a.m.1 views

SQL Injection Vulnerability in Anqing One Point Website Construction System

Anqing One Point Information Technology Co., Ltd. is Anqing set of website construction, government management software, office management software, microcontroller software development, sales; system integration, integrated wiring, server hosting, computer office equipment and consumables sales,...

7.6AI score
Exploits0
CNVD
CNVD
added 2017/11/09 12:0 a.m.1 views

SQL Injection Vulnerability in the Frontend of Esaote E3 Omni-Channel Retail Management Software

E3 omni-channel retail management software is Esaote's e-commerce ERP system for online sales in the fashion industry, integrating Taobao interface, independent B2C mall system, advanced order processing system, logistics and warehousing system, network marketing and promotion system, and...

7.8AI score
Exploits0
CNVD
CNVD
added 2017/11/07 12:0 a.m.1 views

SQL Injection Vulnerability in Tonglian Da3 Collaboration Office Platform

Tonglian Da3 cooperative office platform is a series of Da3 management software products provided by Tonglian for governmental units at all levels, focusing on "mobile government office". There is a SQL injection vulnerability in the Da3 collaborative office platform, which can be exploited by an...

7.7AI score
Exploits0
CNVD
CNVD
added 2017/11/06 12:0 a.m.1 views

D-Park Pro Domain Parking Script SQL Injection Vulnerability

D-Park Pro Domain Parking Script is a domain parking script. A SQL injection vulnerability exists in D-Park Pro Domain Parking Script version 1.0. A remote attacker can exploit this vulnerability to inject SQL commands...

9.8CVSS8.2AI score0.02148EPSS
Exploits3References1
CNVD
CNVD
added 2017/11/02 12:0 a.m.1 views

Cisco Prime Collaboration Provisioning SQL Injection Vulnerability

Cisco Prime Collaboration Provisioning application is the United States of America Cisco Cisco company's set of Web-based next-generation communications services software. The software provides IP communication service features for IP telephony, voice mail and unified communications environments....

8.1CVSS8.5AI score0.0142EPSS
Exploits0References1
CNVD
CNVD
added 2017/11/01 12:0 a.m.1 views

Nice PHP FAQ Script SQL Injection Vulnerability

Nice PHP FAQ Script is a PHP-based website autoresponder script. A SQL injection vulnerability exists in Nice PHP FAQ Script. The vulnerability can be exploited to inject SQL commands by sending the 'nicetheme' parameter to the index.php file...

9.8CVSS8.3AI score0.02652EPSS
Exploits5References1
CNVD
CNVD
added 2017/10/30 12:0 a.m.0 views

SQL Injection Vulnerability in MIPCMS ApiAdminUser.php Page

MIPCMS is a free and open source based on Baidu Mobile Accelerator MIP engine based on the development of articles, information, content management system, but also the system for the Internet webmasters, entrepreneurs and other groups to create SEO-optimized after the station-building system. A...

7.8AI score
Exploits0
CNVD
CNVD
added 2017/10/27 12:0 a.m.1 views

SQL Injection Vulnerability in WebShow Shopping System V5.4 listjp.asp

Net show shopping system is a shopping site developed with asp + access. A SQL injection vulnerability exists in NetShow Shopping System V5.4 listjp.asp. An attacker can obtain sensitive database information by constructing specific SQL statements...

7.7AI score
Exploits0
OSV
OSV
added 2017/10/23 6:29 p.m.1 views

DEBIAN-CVE-2012-4570

SQL injection vulnerability in LetoDMSCore/Core/inc.ClassDMS.php in LetoDMS formerly MyDMS before 3.3.8 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS9.4AI score0.01863EPSS
Exploits0References1
CNVD
CNVD
added 2017/10/22 12:0 a.m.3 views

Multiple Vulnerabilities in CwCMS v1.0

CwCMS is an enterprise website management system. CwCMS v1.0 has SQL injection and file upload vulnerabilities in several files, which can be exploited by attackers to obtain sensitive information from the database and gain administrative privileges on the server...

8AI score
Exploits0
Rows per page
Query Builder