Lucene search
+L

8632 matches found

ATTACKERKB
ATTACKERKB
added 2024/12/17 2:15 p.m.7 views

CVE-2024-8972

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobil365 Informatics Saha365 App allows SQL Injection. This issue affects Saha365 App: before 30.09.2024...

9.8CVSS5.8AI score0.00436EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/17 12:00 a.m.7 views

PT-2024-39346 · Unknown · Saha365 App

Name of the Vulnerable Software and Affected Versions: Saha365 App versions prior to 30.09.2024 Description: The issue is related to the improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem affects the Saha365 App. Recommendations: For versions...

9.8CVSS8.2AI score0.00436EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/17 12:00 a.m.6 views

Mobil365 Informatics Saha365 SQL注入漏洞

Mobil365 Informatics Saha365 is an application from Mobil365 Informatics, Inc. Mobil365 Informatics Saha365 suffers from a SQL injection vulnerability that stems from an improper neutralization of a special element...

9.8CVSS7.9AI score0.00436EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.10 views

PT-2024-36639 · Unknown · Serviceonline Service

Name of the Vulnerable Software and Affected Versions: serviceonline Service versions n/a through 1.0.4 Description: The issue is related to an 'SQL Injection' vulnerability, specifically improper neutralization of special elements used in an SQL command, allowing Blind SQL Injection. This proble...

8.5CVSS7.8AI score0.0049EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.5 views

Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul. A security vulnerability exists in Online Nurse Hiring System version v1.0, which stems from an SQL injection vulnerability found in the component /admin/profile.php via the fullname parameter...

7.2CVSS7.9AI score0.0057EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.13 views

PT-2024-36624 · Unknown · Etemplates

Name of the Vulnerable Software and Affected Versions: eTemplates versions 0.2.1 and earlier Description: The issue is related to the improper neutralization of special elements used in an SQL command, allowing SQL injection. This problem can be exploited to inject SQL code, potentially leading t...

9.3CVSS8.3AI score0.01192EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.10 views

The vulnerability of the WhatsUp Gold network infrastructure monitoring system lies in the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to user data.

The vulnerability of the WhatsUp Gold network infrastructure monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to user accounts...

10CVSS8.1AI score0.93EPSS
SaveExploits2References5Affected Software1
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.4 views

WordPress plugin Mimoos SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS9.2AI score0.00502EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/16 12:00 a.m.9 views

The vulnerability in the web interface of the Cisco Secure Firewall Management Center software for network administration allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the Web interface for managing Cisco Secure Firewall Management Center software formerly known as Cisco Firepower Management Center is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute...

6.8CVSS6AI score0.00451EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.30 views

WordPress plugin Instant Appointment SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.2AI score0.00523EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.13 views

PT-2024-36628 · Unknown · Site Intel

Name of the Vulnerable Software and Affected Versions: Critical Site Intel versions n/a through 1.0 Description: The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection'. This allows for SQL Injection, which can be exploited...

9.3CVSS7.6AI score0.01166EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.7 views

WordPress plugin WP Simple Pay Lite Manager SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

7.6CVSS9.1AI score0.00501EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/12/16 12:00 a.m.11 views

WordPress plugin Code Generator Pro SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.4AI score0.00747EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2024/12/14 8:25 p.m.9 views

WordPress Service plugin <= 1.0.4 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Service versions = 1.0.4...

8.5CVSS8.1AI score0.0049EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/12/14 8:20 p.m.10 views

WordPress Share Buttons – Social Media plugin <= 1.0.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by LVT-tholv2k Patchstack Alliance in WordPress Plugin Share Buttons – Social Media versions = 1.0.2...

9.3CVSS8.1AI score0.01701EPSS
SaveExploits1Affected Software1
Patchstack
Patchstack
added 2024/12/14 8:04 p.m.5 views

WordPress TSB Occasion Editor plugin <= 1.2.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin TSB Occasion Editor versions = 1.2.1...

8.5CVSS8.1AI score0.00502EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2024/12/13 12:00 a.m.9 views

Dell Avamar SQL Injection Vulnerability (CNVD-2025-18249)

Dell Avamar is a data backup and recovery software. A SQL injection vulnerability exists in Dell Avamar. The vulnerability stems from a lack of proper neutralization of specific elements used in SQL commands. An attacker could exploit the vulnerability to execute commands...

8.8CVSS8.1AI score0.00626EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/12/13 12:00 a.m.8 views

Online Class and Exam Scheduling System class_update.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the id parameter of the classupdate.php page. ...

8.8CVSS8.3AI score0.00517EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/12 7:15 p.m.5 views

CVE-2024-54811

A SQL injection vulnerability in /index.php in PHPGurukul Park Ticketing Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "login" parameter...

9.8CVSS6.1AI score0.00613EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/12/12 12:00 a.m.9 views

Image Access Scan2Net 安全漏洞

Image Access Scan2Net is a scanning software from Image Access Germany. A security vulnerability exists in Image Access Scan2Net versions 7.40 and earlier, 7.42 and earlier, and 7.42B and earlier, which originates from an authenticated attacker who can perform SQL injection by accessing the...

4.4CVSS7.7AI score0.00289EPSS
SaveExploits0References2
Rows per page
Query Builder