Lucene search
+L

8644 matches found

CNVD
CNVD
added 2019/10/06 12:00 a.m.4 views

SQL Injection Vulnerability in Business-to-Business Website Building System

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/10/06 12:00 a.m.6 views

S-CMS php version enterprise website building system v3.0 SQL injection vulnerability in background aj*** N*** parameters (CNVD-2019-40101)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj N parameter there is a SQL injection vulnerability, t...

7.6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.11 views

The vulnerability of the InnoDB component in the MySQL Database Management System allows attackers to gain access to modify, add, or delete data, causing system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data, causing system downtime or service failures...

7.5CVSS5.5AI score0.02594EPSS
SaveExploits0References9Affected Software12
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:00 a.m.7 views

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for managing MySQL databases involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.5AI score0.03171EPSS
SaveExploits0References11Affected Software13
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:00 a.m.11 views

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management arises from the lack of protective measures for SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.8CVSS6.1AI score0.0595EPSS
SaveExploits1References5Affected Software2
CNVD
CNVD
added 2019/09/29 12:00 a.m.12 views

eBrigade SQL Injection Vulnerability (CNVD-2019-35770)

eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...

8.8CVSS8.2AI score0.01743EPSS
SaveExploits1References1
CNVD
CNVD
added 2019/09/27 12:00 a.m.3 views

SQL Injection Vulnerability in LJCMS

LJCMS is a free and open source content management system. LJCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/09/26 12:00 a.m.3 views

SQL Injection Vulnerability in the Basic Website of Shenzhen Tiandixin Network Technology Co.

Founded in 2010, Tiandixin Network is an enterprise mainly focusing on corporate website construction, Baidu home page natural ranking, domain name registration, space rental, enterprise post office, 400 telephone, corporate VI design, electronic album production and other services. The basic...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2019/09/26 12:00 a.m.4 views

ShopsN open source mall system In***::go*** file with SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system In::go file there is a SQL injection...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2019/09/26 12:00 a.m.6 views

SQL Injection Vulnerability in Kaixin Quote System V2.0

Qixing Quotation System V2.0 is a general management system developed for material quotations. The Qixing Quotation System V2.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/09/25 12:00 a.m.6 views

SQL Injection Vulnerability in Zendo Project Management System m****l.php File

Zendo project management system developed by Qingdao Easoft Tianchuang Network Technology Co., Ltd, domestic open source project management software. It integrates product management, project management, quality management, document management, organizational management and transaction management...

8.3AI score
SaveExploits0
CNVD
CNVD
added 2019/09/25 12:00 a.m.9 views

SQL Injection Vulnerability in VANOC Enterprise Website Management System c****r.php Page

Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system cr.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.8AI score
SaveExploits0
OSV
OSV
added 2019/09/24 3:15 p.m.11 views

CVE-2019-16383

MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker...

9.4CVSS7.3AI score0.05187EPSS
SaveExploits4References5
CNVD
CNVD
added 2019/09/24 12:00 a.m.10 views

SQL injection vulnerability in asp website builder system pr***.asp of Shanghai Enterprise Torch Advertising Media Co.

Ltd. is committed to providing all kinds of enterprises and institutions with network domain name registration, web hosting rental, website construction and maintenance, website promotion and publicity, website revision and translation, enterprise post office, network payment, system integration,...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2019/09/23 12:00 a.m.3 views

SQL injection vulnerability in zzcms 2019 frontend (CNVD-2019-37717)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2019/09/23 12:00 a.m.4 views

SQL Injection Vulnerability in the Website Building System **fo.asp Page of Anshan China Domain Network Technology Co.

Ltd. is a high-tech network company that specializes in website building and website construction. Ltd. website building system fo.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information such as database...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2019/09/21 12:00 a.m.6 views

S-CMS e-commerce system aj***.php page L_*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page L parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/09/20 12:00 a.m.3 views

SQL Injection Vulnerability in Website Building System of Suzhou Ernst Network Technology Co.

Suzhou Ernst Network Technology Co., Ltd. is a company specializing in website construction, website optimization, system development; specializing in providing internal and external network solutions for brands and group enterprises. Suzhou Ernst Network Technology Co., Ltd. website building...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2019/09/17 12:00 a.m.6 views

FlameCMS suffers from SQL injection vulnerability (CNVD-2019-37171)

FlameCMS Enterprise Station System is developed in PHP+MYSQL language. FlameCMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/09/17 12:00 a.m.13 views

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

9.3CVSS8AI score0.0201EPSS
SaveExploits2References1
Rows per page
Query Builder