Lucene search
+L

2971 matches found

CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•18 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method UpdateProjectCrossCommunications that can be exploited by an attacker to bypass...

8.8CVSS8.5AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from the internally used 'UpdateOpcSettings' method. An attacker could exploit the vulnerability to cause bypass o...

8.8CVSS8.2AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•20 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UpdateUsers, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00865EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•21 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method GetActiveConnectionVariables, which can be exploited by an attacker to...

8.8CVSS8.4AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method LockGeneralSettings, which can be exploited by an attacker to bypass authorization contro...

8.8CVSS8.5AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•19 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method ActivateProject, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•30 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an SQL injection in the UnlockTraceLevelSettings method, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00654EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•19 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that stems from an SQL injection in the ImportCertificate method, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.4AI score0.00448EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/16 12:00 a.m.•34 views

PT-2025-16832 · Unknown · Telecontrol Server Basic

Name of the Vulnerable Software and Affected Versions: TeleControl Server Basic versions prior to 3.1.2.2 Description: The issue allows an authenticated remote attacker to bypass authorization controls, read from and write to the application's database, and execute code with "NT...

9CVSS7.5AI score0.00806EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•17 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method UnlockTcmSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00702EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•22 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that can be exploited by an attacker to cause remote code execution...

9.8CVSS8.9AI score0.01015EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•20 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from a SQL injection vulnerability that originates from a SQL injection in the internal method LockSmtpSettings, which can be exploited by an attacker to bypass...

8.8CVSS8.4AI score0.00702EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•23 views

Siemens TeleControl Server Basic SQL注入漏洞

Siemens TeleControl Server Basic is an industrial remote controller from Siemens, Germany. Siemens TeleControl Server Basic suffers from an SQL injection vulnerability that originates from an internal method, ImportConnectionVariables, which can be exploited by an attacker to bypass authorization...

8.8CVSS8.5AI score0.00806EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/16 12:00 a.m.•16 views

Sourcecodester Online ID Generator System 安全漏洞

SourceCodester Online ID Generator System is an online identity generator system from SourceCodester open source. A security vulnerability exists in the Sourcecodester Online ID Generator System version 1.0, which stems from an incorrect manipulation of the parameter id leading to SQL injection...

9.8CVSS7.4AI score0.00497EPSS
SaveExploits1References2
OSV
OSV
•added 2025/04/14 9:15 a.m.•16 views

CVE-2025-3559

A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical. This vulnerability affects the function ForeProductListController of the file /mall/product/0/20. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.7AI score0.00586EPSS
SaveExploits1References4
OSV
OSV
•added 2025/04/09 4:15 p.m.•12 views

CVE-2025-29390

jerryhanjj ERP 1.0 is vulnerable to SQL Injection in the setpassword function in application/controllers/home.php...

8.8CVSS5.8AI score0.00463EPSS
SaveExploits1References2
OSV
OSV
•added 2025/04/08 7:15 a.m.•20 views

CVE-2025-3427

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infilltext' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

4.9CVSS5.8AI score0.00403EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/08 12:00 a.m.•16 views

WordPress plugin Team Circle Image Slider With Lightbox SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

4.9CVSS6.9AI score0.00414EPSS
SaveExploits0References5
OSV
OSV
•added 2025/04/07 4:15 a.m.•17 views

CVE-2025-3334

A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/categorysave.php. The manipulation of the argument Category leads to sql injection. The attack may be launched...

9.8CVSS5.8AI score0.00555EPSS
SaveExploits1References4
OSV
OSV
•added 2025/04/07 3:15 a.m.•16 views

CVE-2025-3333

A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/menuupdate.php. The manipulation of the argument menu leads to sql injection. The attack can be launched...

9.8CVSS5.8AI score0.00555EPSS
SaveExploits1References4
Rows per page
Query Builder