Lucene search
+L

8926 matches found

Positive Technologies
Positive Technologies
•added 2023/01/31 12:00 a.m.•22 views

PT-2023-15485 · Unknown · Bang Resto

Name of the Vulnerable Software and Affected Versions: Bangresto version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the itemID parameter. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

9.8CVSS9.6AI score0.00934EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/01/31 12:00 a.m.•19 views

Bangresto SQL injection vulnerability

Bangresto is a restaurant source code POS by the individual developer Mesin Kasir. A security vulnerability exists in Bangresto version 1.0 that stems from the presence of SQL injection via the itemID parameter...

9.8CVSS8.7AI score0.00934EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/01/31 12:00 a.m.•20 views

WDAC OLE DB Component Code Execution

The vulnerability of the WDAC OLE DB component for SQL Server on Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.2AI score0.01413EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2023/01/30 7:15 a.m.•26 views

CVE-2023-22324

SQL injection vulnerability in the CONPROSYS HMI System CHS Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the database may be obtained...

6.5CVSS6.4AI score0.01327EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/27 12:00 a.m.•20 views

OpenCats SQL injection vulnerability

OpenCats is an open source recruitment process management system. A security vulnerability exists in OpenCats version v0.9.7, which stems from the importID parameter of its Import viewerrors function that allows an attacker to implement SQL injection...

9.8CVSS8.6AI score0.01072EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/01/27 12:00 a.m.•23 views

SiteServer CMS SQL injection vulnerability

SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...

9.8CVSS8.7AI score0.00741EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/01/27 12:00 a.m.•22 views

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter todate that ca...

5.8CVSS5.2AI score0.00576EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•43 views

WordPress Plugin LearnPress has a SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin LearnPress...

9.9CVSS8.5AI score0.04269EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2023/01/24 12:00 a.m.•22 views

Amano Xoffice parking solutions has a SQL injection vulnerability

Amano Xoffice parking solutions is an application from Amano. It provides an ideal solution for all types of parking lots. Amano Xoffice parking solutions version 7.1.3879 suffers from a security vulnerability that stems from susceptibility to SQL injection attacks...

9.8CVSS8.6AI score0.0089EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/01/20 7:15 p.m.•22 views

CVE-2020-21152

SQL Injection vulnerability in inxedu 2.0.6 allows attackers to execute arbitrary commands via the functionIds parameter to /saverolefunction...

9.8CVSS6.1AI score0.0077EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/01/20 7:15 a.m.•26 views

CVE-2023-20010

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This...

8.8CVSS7.4AI score0.00927EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/01/20 12:00 a.m.•29 views

Mangboard SQL injection vulnerability

Mangboard is an e-commerce website of the South Korean company Mangboard. A SQL injection vulnerability exists in Mangboard versions prior to 2.0.4. The vulnerability stems from an unchecked input value, which is an SQL injection vulnerability that can be exploited by an attacker to execute...

9.8CVSS9.1AI score0.00927EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/01/20 12:00 a.m.•25 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System. An attacker could exploit this vulnerability to execute arbitrary...

9.8CVSS9.1AI score0.0088EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/01/20 12:00 a.m.•31 views

WordPress Plugin The Paid Memberships Pro: SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

9.8CVSS8.6AI score0.9246EPSS
SaveExploits6References4
Positive Technologies
Positive Technologies
•added 2023/01/19 12:00 a.m.•21 views

PT-2023-10003 · Unknown · Oktora24 2Moons

Name of the Vulnerable Software and Affected Versions: oktora24 2moons affected versions not specified Description: A critical vulnerability has been found in oktora24 2moons, affecting an unknown function. The manipulation leads to sql injection. Recommendations: At the moment, there is no...

9.8CVSS7.4AI score0.00673EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2023/01/19 12:00 a.m.•18 views

PT-2023-10249 · Unknown · Copperwall Twiddit

Name of the Vulnerable Software and Affected Versions: copperwall Twiddit affected versions not specified Description: A critical issue affects the processing of the file index.php, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is...

9.8CVSS7.4AI score0.00759EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2023/01/18 12:00 a.m.•15 views

Danynab Movify-J SQL Injection Vulnerability

danynab is an application by the individual developer of danynab. An SQL injection vulnerability exists in danynab movify-j, which stems from the fact that incorrect manipulation of the movieId/username parameter can lead to sql injection...

9.8CVSS6.5AI score0.00756EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/01/18 12:00 a.m.•18 views

PT-2023-1078 · Cisco · Cisco Unified Communications Manager Session Management Edition +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications Manager versions 11.51 through 14 Cisco Unified Communications Manager Session Management Edition versions 11.51 through 14 Description: The issue is related to errors in processing input data in the web interface...

8.8CVSS8.7AI score0.00927EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/18 12:00 a.m.•18 views

PhoenixCF SQL Injection Vulnerability

phoenixcf is an application by iamdroppy Personal Developer. phoenixcf suffers from a SQL injection vulnerability. An attacker could exploit this vulnerability to cause a sql injection...

9.8CVSS6.7AI score0.00689EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/18 12:00 a.m.•18 views

Click-reminder SQL injection vulnerability

click-reminder is a Web 2.0 application by lierdakil personal developer. It helps users to remember the last time they did something. A SQL injection vulnerability exists in click-reminder. An attacker could exploit this vulnerability to cause a sql injection...

9.8CVSS6.7AI score0.00689EPSS
SaveExploits0References4
Rows per page
Query Builder