Lucene search
+L

8926 matches found

CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•21 views

Online Ordering System SQL Injection Vulnerability

Online Ordering System is a multi-store ordering system that can be used by any small business. statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

9.8CVSS5.9AI score0.0114EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•23 views

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=reports& date=Lack of validation of external input SQL statements, an...

7.2CVSS6AI score0.04914EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•23 views

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteinquiry lacks validation for external input SQL statements,...

9.8CVSS6AI score0.07043EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•24 views

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=teams/view team&id=Lack of validation of external input SQL statements, an...

7.2CVSS6AI score0.0202EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•25 views

Badminton Center Management System SQL Injection Vulnerability

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

7.2CVSS6AI score0.01024EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•26 views

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL Injection Vulnerability

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

9.8CVSS5.9AI score0.01304EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•19 views

Rescue Dispatch Management System SQL Injection Vulnerability

Rescue Dispatch Management System is a rescue dispatch management system developed by Carlo Montero. v1.0 of Rescue Dispatch Management System is vulnerable to SQL injection, which originates from /rdms/admin/ incidents/viewincident.php?id=The page lacks validation for external input SQL...

9.8CVSS5.9AI score0.01155EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•22 views

PT-2022-9782 · Maxboard · Maxboard

Name of the Vulnerable Software and Affected Versions: Maxboard affected versions not specified Description: The issue allows for SQL injection and file upload attacks due to insufficient validation of input values in some parameters and variables of files, which may lead to arbitrary code...

9.8CVSS10AI score0.01373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/06/01 12:00 a.m.•21 views

DHIS 2 SQL injection vulnerability

DHIS2 is an information system for data capture, management, validation, analysis, and visualization. DHIS2 is vulnerable to SQL injection, which can be exploited by attackers to read, edit, and delete data in the DHIS2 instance database...

8.8CVSS5.8AI score0.01164EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/05/30 12:00 a.m.•13 views

OpenLDAP SQL Injection

The vulnerability of the OpenLDAP protocol lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted query...

10CVSS8.1AI score0.64487EPSS
SaveExploits1References15Affected Software11
attackerkb
attackerkb
•added 2022/05/26 4:15 p.m.•8 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.8CVSS7.4AI score0.0108EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/05/26 2:15 p.m.•28 views

CVE-2022-29688

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy...

7.2CVSS5.8AI score0.00957EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/26 2:15 p.m.•10 views

CVE-2022-29662

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

7.2CVSS6AI score0.00847EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/05/26 2:15 p.m.•14 views

CVE-2022-29684

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/Label/jsdel...

7.2CVSS7.1AI score0.00957EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•25 views

74cms SQL injection vulnerability

74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of the keyword parameter in /home/jobfairol/resumelist for externally entered SQL statements. An...

7.5CVSS6.1AI score0.01059EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•19 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to a SQL injection vulnerability that originates in docter.php The editid parameter is...

9.8CVSS5.9AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•22 views

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...

7.2CVSS6.1AI score0.00957EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•24 views

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in CSCMS Music Portal System, which can be exploited by attackers to execute illegal SQL commands...

7.2CVSS6AI score0.00957EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/25 12:15 p.m.•13 views

CVE-2022-28862

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized and unexpected operations against the remo...

9.8CVSS7.4AI score0.0106EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/05/25 12:15 p.m.•21 views

CVE-2022-28862

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized and unexpected operations against the remo...

9.8CVSS6AI score0.0106EPSS
SaveExploits0References2
Rows per page
Query Builder