Lucene search
K

8141 matches found

CNNVD
CNNVD
added 2022/05/13 12:0 a.m.2 views

Air Cargo Management System SQL注入漏洞

Air Cargo Management System, an air cargo management system, is vulnerable to a SQL injection vulnerability in version 1.0 of Air Cargo Management System, which originates from /acms/admin/cargotypes/managecargotype.php?id= Lack of filtering and escaping of parameters can be exploited to execute...

7.2CVSS7.4AI score0.00274EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.2 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers to conduct SQL injection via /vloggersmerch/classes/Master.php?f=deletecart attack...

9.8CVSS8.5AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.4 views

NETGEAR ProSafe SSL VPN firmware FVS336G SQL注入漏洞

The NETGEAR FVS336G is a VPN Virtual Private Network firewall router from NETGEAR. A security vulnerability exists in the NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 versions, which stems from a missing filter escape in USERDBDomains.Domainname in cgi-bin/platform.cgi, which can be...

9.8CVSS8.6AI score0.75246EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.2 views

Simple Social Networking Site SQL注入漏洞

Simple Social Networking Site is a social networking site. Simple Social Networking Site has a security vulnerability that can be exploited by attackers to conduct SQL injection attacks via /sns/admin/?page=posts/viewpost&id=...

7.2CVSS7.3AI score0.00274EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.4 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deletecategory SQL injection attack...

9.8CVSS8.5AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.2 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. A security vulnerability exists in Merchandise Online Store, which can be exploited by attackers via /vloggersmerch/classes/Master.php?f=deleteinventory to conduct SQL injection attack...

9.8CVSS8.5AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.3 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/?page=product/manageproduct&id= to conduct SQL injection attack...

7.2CVSS7.3AI score0.00274EPSS
Exploits1References2
OSV
OSV
added 2022/05/12 4:15 p.m.3 views

CVE-2022-22413

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 223022...

9.8CVSS6.2AI score0.00261EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/05/12 3:15 p.m.1 views

CVE-2022-29986

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via \scbs\classes\Master.php?f=deletefacility...

9.8CVSS7.3AI score0.00264EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/12 3:15 p.m.1 views

CVE-2022-29995

Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manageclient&id=...

9.8CVSS7.3AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.4 views

IBM Robotic Process Automation SQL注入漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM Corporation. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation is vulnerable to a SQL injection vulnerability that could be...

9.8CVSS6AI score0.00261EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.1 views

Money Transfer Management System SQL注入漏洞

Money Transfer Management System is a remittance management system.Money Transfer Management System 1.0 is vulnerable to SQL injection, which can be exploited by attackers to obtain information about data in the target system...

9.8CVSS8.6AI score0.00264EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/12 12:0 a.m.2 views

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

7.2CVSS7.3AI score0.00274EPSS
Exploits1References2
OSV
OSV
added 2022/05/11 7:15 p.m.2 views

CVE-2022-30449

Hospital Management System in PHP with Source Code HMS 1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in room.php...

9.8CVSS5.8AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/11 7:15 p.m.2 views

CVE-2022-30451

An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1...

8.8CVSS7.5AI score0.01449EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.1 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to a SQL injection vulnerability that originates in room.php SQL injection vulnerability. An...

9.8CVSS8.7AI score0.00205EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/11 12:0 a.m.2 views

Photosynthetic Technology waimairenCMS SQL注入漏洞

Photosynthetic Technology waimairenCMS is a takeaway content management system from Photosynthetic Technology China. A security vulnerability exists in waimairenCMS versions prior to 9.1. An attacker can exploit the vulnerability to execute code...

8.8CVSS8.1AI score0.01449EPSS
Exploits1References3
OSV
OSV
added 2022/05/10 7:15 p.m.2 views

CVE-2021-43010

In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can bypass access to sensitive data...

7.5CVSS7.1AI score
Exploits0References1
CNNVD
CNNVD
added 2022/05/10 12:0 a.m.2 views

WordPress plugin RSVPMaker SQL注入漏洞

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. RSVPMaker is an event scheduling and RSVP tracking plugin used in WordPress RSVPMaker plugin 9.2.5 and earlier versions are vulnerable to SQL injection, which stems from a lack of SQL escaping and...

9.8CVSS7.5AI score0.6074EPSS
Exploits0References5
OSV
OSV
added 2022/05/09 5:15 p.m.2 views

CVE-2022-0592

The MapSVG WordPress plugin before 6.2.20 does not validate and escape a parameter via a REST endpoint before using it in a SQL statement, leading to a SQL Injection exploitable by unauthenticated users...

9.8CVSS7.4AI score
Exploits0References1
Rows per page
Query Builder