Lucene search
+L

8927 matches found

CNVD
CNVD
•added 2020/03/17 12:00 a.m.•9 views

SQL injection vulnerability in cp_***.php file of website building system of Henan Lisuo Internet Information Technology Co.

Henan LISO Internet Information Technology Co., Ltd. is a comprehensive Internet service organization that provides network solutions for enterprises to enhance the value of their Internet marketing. Henan Lishou Internet Information Technology Co., Ltd. building system cp.php file there is a SQL...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/17 12:00 a.m.•23 views

SuiteCRM SQL Injection Vulnerability (CNVD-2020-18564)

SuiteCRM is a free open source customer relationship management application. SuiteCRM suffers from an SQL injection vulnerability. No detailed vulnerability details are provided at this time...

9.8CVSS8.1AI score0.01112EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/03/16 10:15 p.m.•16 views

CVE-2020-8783

SuiteCRM 7.10.x versions prior to 7.10.23 and 7.11.x versions prior to 7.11.11 allow SQL Injection issue 1 of 4...

9.8CVSS8.9AI score0.01053EPSS
SaveExploits0References5
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•18 views

Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS exists sql injection vulnerability

CloudYou CMS is a free + open source urban substation content management system based on TP5.0 framework as the core development. Zhenjiang Yunyu Network Technology Co., Ltd. YUNUCMS there is a sql injection vulnerability, attackers can use the vulnerability to obtain database sensitive informati...

7.3AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•24 views

Sapplica Sentrifugo SQL Blind Bets Vulnerability

Sentrifugo is an intuitive and easy to use open source human resource management software. Sapplica Sentrifugo 3.2 suffers from an SQL blind injection vulnerability. An attacker can exploit this vulnerability to read sensitive information from a database used by the application via the...

6.5CVSS7.4AI score0.01164EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/03/16 12:00 a.m.•18 views

ShopsN open source mall system v3.0.0 sh*** parameter SQL injection vulnerability

ShopsN open source mall system is a product of Shanghai Yisu Network Technology Co. Ltd. ShopsN open source mall system v3.0.0 sh parameter SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•20 views

ABB eSOMS SQL Injection Vulnerability

ABB eSOMS is a plant operations management system from ABB Switzerland. A SQL injection vulnerability exists in ABB eSOMS 6.0.3 and prior versions. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this...

7.6CVSS8.2AI score0.00935EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•9 views

XYCMS message board PHP version of the background of the SQL injection vulnerability

XYCMS message board PHP version is to php + MySQL for the development of php message board source code, software for the ordinary message board, can be widely used in corporate websites and other websites that need a message board to use. XYCMS message board PHP version of the background there ar...

8AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/13 12:00 a.m.•10 views

SQL injection vulnerability in us***.php file of Jinwei Mobile Mall system

Jinwei mobile mall system is a micro-business customers with a public number, imitation hand Tao page layout, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory control, subdivided...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/12 12:00 a.m.•12 views

SQL injection vulnerability in the us***.cl***.php file of YIXUNCMS enterprise website builder system

YIXUNCMS enterprise website construction system is a set of display website system developed by Yixun Software Studio for small and medium-sized enterprises. There is a SQL injection vulnerability in the us.cl.php file of YIXUNCMS enterprise website builder system. Attackers can use the...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/10 12:00 a.m.•9 views

SQL injection vulnerability in co***.php page of Yantai Cloud Pulse Network Technology Co.

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/10 12:00 a.m.•11 views

Interactive Marketing Intelligent Sales Platform suffers from SQL Injection Vulnerability

Baoding Interactive Enterprise Marketing Planning Co., Ltd. is to provide information technology local services for China's enterprises, in the domestic mode of operation to realize the enterprise information. SQL injection vulnerability exists in Interactive Marketing Intelligent Sales Platform...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/09 12:00 a.m.•24 views

Yubico YubiKey Validation Server SQL Injection Vulnerability (CNVD-2020-16073)

Yubico YubiKey Validation Server is an authentication server from the Swedish company Yubico. A SQL injection vulnerability exists in YubiKey Validation Server versions prior to 2.40. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

7.5CVSS8.2AI score0.01504EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/03/08 12:00 a.m.•20 views

TestLink SQL Injection Vulnerability (CNVD-2020-16091)

TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink 1.9.19 and earlier versions. The vulnerability stems from a lack of validation of externally entered SQL statements in...

8.8CVSS8.1AI score0.01964EPSS
SaveExploits0References1
Gitee
Gitee
•added 2020/03/07 8:41 a.m.•20 views

poc

This is a collection of proof-of-concept PoC exploits for various vulnerabilities, primarily targeting web applications. The PoCs are written in Python and utilize the Beebeeto framework. Here's a summary of the PoCs: 1. Discuz x3.0 /static/image/common/focus.swf Cross Site Scripting XSS POC: Thi...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/07 12:00 a.m.•13 views

SQL Injection Vulnerability in Shipping 100 System co***.php Page

Shipping 100 System is a virtual goods autoship system/article pay to read system. A SQL injection vulnerability exists in the co.php page of the Shipment 100 system, which can be exploited by attackers to obtain sensitive information from the database...

7.5AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/05 12:00 a.m.•8 views

Eight images with SQL injection vulnerability

Eight Pictures is a web platform that allows you to encrypt pictures with QR codes. Eight Pictures suffers from a SQL injection vulnerability that can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/05 12:00 a.m.•9 views

SQL injection vulnerability in the ne***_sh***.php page of the Handan Love Help You Do website building system

Handan Love Helps You Do is the first serious and professional marriage agency in Handan. SQL injection vulnerability exists in the nesh.php page of the Handan Love Help You Do website building system, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/04 12:00 a.m.•15 views

SQL Injection Vulnerability in ILAS III Digital Library System

Integrated Library Automation System ILAS is a set of integrated library automation system that can be adapted to the use of libraries of different levels, scales and types at home and abroad, which is undertaken and organized by the Shenzhen Library. ILAS III digital library system SQL injection...

8AI score
SaveExploits0
CNVD
CNVD
•added 2020/03/03 12:00 a.m.•12 views

SQL Injection Vulnerability in Jinwei Smart Restaurant System (CNVD-2020-21995)

Jinwei Smart Restaurant is truly free restaurant management software. Suitable for all kinds of large and small restaurants, as well as fast food, Chinese food, Western food, hot pot restaurant and other kinds of catering business. Jinwei intelligent restaurant system SQL injection vulnerability,...

8AI score
SaveExploits0
Rows per page
Query Builder