Lucene search
K

8119 matches found

CNVD
CNVD
added 2020/04/04 12:0 a.m.1 views

SQL Injection Vulnerability in Longmen Technology Website Building System

Henan Yue Longmen Technology Co., Ltd. is a website construction, software development and promotion and marketing of a comprehensive network technology company. There is a SQL injection vulnerability in the website building system of LongmenTech, which can be exploited by attackers to obtain...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/04/04 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Huaihua Fifth Element Network Information Company Limited (CNVD-2020-25547)

Huaihua Fifth Element Network Information Co., Ltd. is an Internet + application services company, Internet technology, marketing, operations, big data analysis, cloud computing applications as the core, to carry out the Internet + industrial integration operation and development. Huaihua Fifth...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/04/03 12:0 a.m.1 views

SQL Injection Vulnerability in ForU CMS

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/04/03 12:0 a.m.1 views

ForU CMS suffers from SQL injection vulnerability (CNVD-2020-25782)

ForU CMS is an open source website management system. ForU CMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information about a database...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/04/03 12:0 a.m.1 views

SQL Injection Vulnerability in IBOS-Office Portal

IBOS-Office Portal is an open source office OA system developed by Shenzhen BOS Xiechuang Network Technology Co. IBOS-Office Portal has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

8AI score
Exploits0
CNVD
CNVD
added 2020/04/02 12:0 a.m.1 views

SQL Injection Vulnerability in AlpacaCMS

AlpacaCMS is an open source lightweight tree CMS system . It is based on php+mysql and b2core MVC as the underlying architecture . AlpacaCMS SQL injection vulnerability , an attacker can exploit the vulnerability to obtain database data...

8.1AI score
Exploits0
CNVD
CNVD
added 2020/03/31 12:0 a.m.1 views

WordPress Randy Peterman Murph StatTraq SQL Injection Vulnerability

WordPress is a blogging platform based on the PHP language, which can be used to set up a website on a server that supports PHP and MySQL databases, and can also be used as a content management system CMS. A SQL injection vulnerability exists in WordPress Randy Peterman Murph StatTraq. An attacke...

7.8AI score
Exploits0References1
CNVD
CNVD
added 2020/03/31 12:0 a.m.1 views

SQL Injection Vulnerability in OurPHP

OurPHP is an enterprise e-commerce website builder. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/03/31 12:0 a.m.4 views

odata4j sql injection vulnerability

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS9.8AI score0.00281EPSS
Exploits0
CNVD
CNVD
added 2020/03/31 12:0 a.m.1 views

Jiangxi Huabang Media Co., Ltd. website building system has SQL injection vulnerability

Jiangxi Huabang Media Co., Ltd. is a comprehensive IT company integrating enterprise informationization construction, network development and Internet marketing. Jiangxi Huabang Media Co., Ltd. building system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/03/30 12:0 a.m.1 views

YCCMS suffers from SQL injection vulnerability (CNVD-2020-24720)

YCCMS is a PHP version of a lightweight website building system. YCCMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/03/29 12:0 a.m.1 views

SQL Injection Vulnerability in Heybbs Backend ad***_se***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background adse.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/03/29 12:0 a.m.1 views

SQL Injection Vulnerability in Heybbs Backend no***.php Page

Heybbs micro-community is a front-end based on bootstrap + jq + css, back-end php + mysql development of micro-community program. Heybbs background no.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/03/28 12:0 a.m.1 views

S-CMS suffers from SQL injection vulnerability (CNVD-2020-27168)

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.9AI score
Exploits0
OSV
OSV
added 2020/03/27 7:15 p.m.1 views

CVE-2020-10817

The custom-searchable-data-entry-system aka Custom Searchable Data Entry System plugin through 1.7.1 for WordPress allows SQL Injection. NOTE: this product is discontinued...

8.8CVSS7.3AI score
Exploits0References2
CNVD
CNVD
added 2020/03/25 12:0 a.m.1 views

Samsung Mobile Device SQL Injection Vulnerability (CNVD-2020-32869)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. Samsung mobile devices suffer from a SQL injection vulnerability that can be exploited by attackers to execute arbitrary SQL queries with the help of specially crafted SQL statements...

7.8CVSS8.2AI score0.00037EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/25 12:0 a.m.0 views

Web exhibition PHP foreign trade enterprise website red style has SQL injection vulnerability

Netzhan Technology Beijing Century Netzhan Technology Co., Ltd. is an Internet service operator specializing in the field of exhibition shows. Nethub PHP foreign trade enterprise website red style SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/03/24 12:0 a.m.2 views

Grandstream UCM6200 SQL Injection Vulnerability (CNVD-2020-23201)

The Grandstream UCM6200 is an enterprise-class switch for IP telephony communications from Grandstream. An SQL injection vulnerability exists in the HTTP interface of the Grandstream UCM6200 versions prior to 1.0.19.20 and 1.0.20.17, which can be exploited by an attacker to execute shell commands...

10CVSS8.4AI score0.92735EPSS
Exploits8References1
CNVD
CNVD
added 2020/03/24 12:0 a.m.1 views

SQL Injection Vulnerability in Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/03/23 12:0 a.m.0 views

U-Mail mail server software suffers from SQL injection vulnerability ( CNVD-2020-26499).

U-Mail mail server software is a domestic first-tier brand that really provides lifetime free upgrades to the mail system, including data upgrades to the mail system, antivirus engine, and anti-spam engine. U-Mail mail server software has SQL injection vulnerability, attackers can use the...

8AI score
Exploits0
Rows per page
Query Builder