Lucene search
+L

8640 matches found

CNNVD
CNNVD
added 2023/03/17 12:00 a.m.5 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which originates from a security issue in the component login page admin/ajax.php?action=login2, which leads...

8.1CVSS6.6AI score0.00572EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/16 12:00 a.m.10 views

Pimcore SQL注入漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A SQL injection vulnerability exists in Pimcor...

7.9CVSS7.5AI score0.00855EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/03/16 12:00 a.m.8 views

Kirin Fortress Machine SQL注入漏洞

Tosec Kirin Fortress Machine is a series of fortress machines from Cosco Kirin Technology Tosec in Beijing, China. A security vulnerability exists in Kirin Fortress Machine version v.1.7-2020-0610, which stems from the presence of a SQL injection vulnerability that can be exploited by an attacker...

9.8CVSS9AI score0.00706EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.12 views

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System v1.0, which stems from a SQL injection vulnerability via the viewid parameter...

9.8CVSS8.6AI score0.01125EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/03/15 12:00 a.m.10 views

Simple Art Gallery SQL注入漏洞

Simple Art Gallery is an art gallery application from Simple Art Gallery, Inc. A SQL injection vulnerability exists in Simple Art Gallery version 1.0, which stems from a problem in the file adminHome.php, where manipulation of the parameter socialfacebook can lead to sql injection...

9.8CVSS7AI score0.00763EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/03/14 12:00 a.m.17 views

PT-2023-1882 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.3 Description: A vulnerability has been identified in the audit log form of RUGGEDCOM CROSSBOW, which is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary...

9CVSS6.2AI score0.00805EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/03/13 12:00 a.m.15 views

SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞

SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Friendly Island Pizza Website and Ordering System due to unknown code in the file paypalsuccess.php in the...

9.8CVSS7.1AI score0.00743EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/13 12:00 a.m.10 views

Online Pizza Ordering System SQL注入漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pizza Ordering System version 1.0, which was discovered to contain an SQL injection vulnerability via the username parameter...

7.5CVSS7.5AI score0.00753EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/11 12:00 a.m.9 views

Computer Parts Sales and Inventory System SQL注入漏洞

Computer Parts Sales and Inventory System is a computer parts sales and inventory system by Warren Daloyan, an individual developer. SourceCodester Computer Parts Sales and Inventory System version 1.0 suffers from a SQL injection vulnerability that originates from a security issue in the file...

9.8CVSS7.2AI score0.00808EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/03/10 12:00 a.m.10 views

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Graduate Tracer System version 1.0, which stems from an incorrect manipulation of the parameter user resulting in sql injectio...

9.8CVSS7.1AI score0.00737EPSS
SaveExploits1References4
OSV
OSV
added 2023/03/09 9:15 p.m.10 views

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

9.8CVSS7.3AI score0.00788EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/03/09 12:00 a.m.11 views

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by Sk.Amir Hamza, an individual developer in Bangladesh. A security vulnerability exists in Online Student Management System v1.0, which originates from multiple SQL injection vulnerabilities via the fromdate and todate...

9.8CVSS8.7AI score0.00788EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/09 12:00 a.m.8 views

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/manageuser.php...

9.8CVSS8.7AI score0.00788EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/03/09 12:00 a.m.12 views

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the month parameter in /kruxton/salesreport.php...

9.8CVSS8.7AI score0.00788EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/08 12:00 a.m.9 views

PT-2023-19779 · Funadmin · Funadmin

Name of the Vulnerable Software and Affected Versions: Funadmin version 3.2.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/databases/database/edit" API endpoint. This allows for potential unauthorized access and manipulation of databa...

9.8CVSS9.5AI score0.00741EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:00 a.m.14 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView arises from the lack of protective measures for the SQL query structure, allowing attackers to disclose protected information.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

6.1CVSS5.6AI score0.0089EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2023/03/06 12:00 a.m.11 views

MedData MedDataPACS SQL注入漏洞

MedData MedDataPACS is an image archiving and populating system from MedData. A SQL injection vulnerability exists in versions of MedData MedDataPACS prior to 2023-03-03, which stems from improper neutralization of special elements and a SQL injection vulnerability...

9.8CVSS8.6AI score0.00662EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:00 a.m.11 views

The vulnerability of the manage_record.php web application used for creating medical certificates, the Medical Certificate Generator App, allows a violator to execute arbitrary SQL code.

The vulnerability of the managerecord.php web application used for creating medical certificates in the Medical Certificate Generator App is related to incorrect elimination of special elements in the output data. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code...

9CVSS7.3AI score0.00311EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/06 12:00 a.m.12 views

PT-2023-10270 · Bywater Solutions · Bywater-Koha-Xslt

Name of the Vulnerable Software and Affected Versions: ByWater Solutions bywater-koha-xslt affected versions not specified Description: A critical vulnerability has been found in ByWater Solutions bywater-koha-xslt, affecting the StringSearch function of the file admin/systempreferences.pl. The...

7.2CVSS6AI score0.00588EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2023/03/06 12:00 a.m.8 views

ByWater Solutions bywater-koha-xslt SQL注入漏洞

ByWater Solutions bywater-koha-xslt is ByWater Solutions' Koha repository for XSLT customization for ByWater partners. ByWater Solutions bywater-koha-xslt suffers from a SQL injection vulnerability that stems from manipulation of the parameter name that can lead to sql injection...

7.2CVSS5.8AI score0.00588EPSS
SaveExploits0References4
Rows per page
Query Builder