Lucene search
+L

8644 matches found

CNVD
CNVD
added 2018/02/18 12:00 a.m.5 views

SQL Injection Vulnerability in ThinkLC V3.9 Classified Information System www_admin_member_paylog.php Page

ThinkLC Classified Information System is a local classified information system built on PHP+MYSQL development. SQL injection vulnerability exists in the wwwadminmemberpaylog.php page of ThinkLC V3.9 Classified Information System, which can be exploited by an attacker to obtain sensitive informati...

7.4AI score
SaveExploits0
OSV
OSV
added 2018/02/17 7:29 a.m.9 views

CVE-2018-6368

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...

9.8CVSS5.8AI score0.02166EPSS
SaveExploits4References1
ATTACKERKB
ATTACKERKB
added 2018/02/08 6:29 p.m.9 views

CVE-2017-17425

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue...

9.8CVSS6.6AI score0.03119EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2018/02/08 12:00 a.m.4 views

SQL Injection Vulnerability in Website Construction System of Guangzhou Netsky Network Technology Co.

Guangzhou net days Network Technology Co., Ltd. long-term service in the Internet information technology high-tech positions, specializing in various industries in the enterprise company's e-commerce, website construction and website promotion corporate publicity, software development and other...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2018/02/08 12:00 a.m.7 views

Cisco Unified Communications Manager SQL Injection Vulnerability (CNVD-2018-05337)

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call-processing component of a unified communications system from Cisco. The component provides a scalable, distributable and highly available enterprise IP telephony call processing solution. A SQL injection vulnerability...

4.3CVSS7.9AI score0.01645EPSS
SaveExploits0References1
n0where
n0where
added 2018/02/07 9:12 p.m.46 views

Serverless, Low Cost, Threat Intel Aggregation: ElasticIntel

ElasticIntel is serverless, low cost, threat intel aggregation for enterprise or personal use, backed by ElasticSearch. It is an alternative to expensive threat intel aggregation platforms which ingest the same data feeds you could get for free. ElasticIntel is designed to provide a central,...

0.2AI score
SaveExploits0References2
CNVD
CNVD
added 2018/02/06 12:00 a.m.13 views

ZhandexMap SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other functions.Zh YandexMap is used in one of the distribution of maps through the Yandex Maps service component . A SQL injection...

9.8CVSS8.1AI score0.02166EPSS
SaveExploits5References1
CNVD
CNVD
added 2018/02/04 12:00 a.m.5 views

SQL Injection Vulnerability in Shop7z Online Shopping System Supreme Edition

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shop7z Online Shopping System Supreme Edition suffers from SQL injection vulnerability, which can be exploited by attackers to access or modify database...

8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/31 12:00 a.m.6 views

SQL Injection Vulnerability in Uno Network Technology Website Building System

Shenyang Uno Technology Co., Ltd. is a one-stop service brand marketing planning company committed to providing Chinese enterprises with one-stop service suitable for the development of the times, integrating enterprise station building, search engine optimization, WAP website, APP client and so...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/30 12:00 a.m.4 views

SQL Injection Vulnerability in Chiayi County's Management Resources Inquiry System

The Kiawah County Management Information System is a content management system. Chiayi County Management Information Query System suffers from SQL injection vulnerability, which can be exploited by attackers to access or modify sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/29 12:00 a.m.4 views

SQL Injection Vulnerability in zzcms 8.2 user/check.php File

zzcms is an enterprise website builder program It is an enterprise website builder program. An SQL injection vulnerability exists in the user/check.php file of zzcms version 8.2, which can be exploited by attackers to access or modify database data...

8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/26 12:00 a.m.36 views

Affiligator Affiliate Webshop Management System SQL Injection Vulnerability

Affiligator Affiliate Webshop Management System is a PHP-based web store management system. A SQL injection vulnerability exists in Affiligator Affiliate Webshop Management System version 2.1.0. A remote attacker can inject SQL commands with the help of search/?q=&pricetype=range&price= requests...

9.8CVSS8.3AI score0.01403EPSS
SaveExploits5References1
CNVD
CNVD
added 2018/01/24 12:00 a.m.9 views

Advantech WebAccess/SCADA SQL Injection Vulnerability

Advantech WebAccess is a browser-based HMI software package for human machine interfaces, as well as monitoring and data acquisition SCADA. A SQL injection vulnerability exists in Advantech WebAccess/SCADA, which can be exploited by an attacker to obtain sensitive information about a database...

5.3CVSS7.8AI score0.01364EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/18 12:00 a.m.5 views

Website Security Dog (Apache Edition) V4.0 suffers from SQL injection vulnerability (CNVD-2018-02087)

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. Allows attackers to exploit the...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2018/01/18 12:00 a.m.9 views

Apache Geode Code Execution Vulnerability

Apache Geode cluster is the Apache Software Foundation's platform for providing real-time and consistent access to data for data-intensive applications in distributed cloud architectures. A security vulnerability exists in Apache Geode cluster. A remote attacker can exploit this vulnerability to...

7.5CVSS7.1AI score0.04557EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/18 12:00 a.m.7 views

Web Security Dog (Apache Edition) V4.0 suffers from SQL Injection Vulnerability

Website Security Dog Apache Edition is a server tool that integrates website content security protection, website resource protection and website traffic protection features. Web Security Dog Apache Edition V4.0 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2018/01/14 12:00 a.m.4 views

SQL Injection Vulnerability in DocCms 2016

DocCMS rice husk enterprise building system, also known as rice husk cms, doccms, formerly known as deep throat enterprise building system ShlCms, is a free and open source enterprise website building system, enterprise website generation system. DocCms 2016 has a SQL injection vulnerability,...

7.8AI score
SaveExploits0
OSV
OSV
added 2018/01/12 2:29 p.m.8 views

CVE-2017-14594

The printable searchrequest issue resource in Atlassian Jira before version 7.2.12 and from version 7.3.0 before 7.6.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the jqlQuery query parameter...

6.1CVSS5.4AI score0.01401EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/01/12 12:00 a.m.5 views

SQL Injection Vulnerability in Dispnews.asp Page of Website Construction System of Jingmen Xinnet Technology Development Co.

Jingmen City, Xin network technology development limited company is a network brand marketing and enterprise management information technology professional service providers. There is a SQL injection vulnerability in the dispnews.asp page of the website construction system of Jingmen Xinnet...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2018/01/12 12:00 a.m.6 views

SQL Injection Vulnerability in Xi'an Hongbo Network Technology Co.

Xi'an Hongbo Network Technology Co., Ltd. is a professional design team integrating network preparation, digital film and television production, and brand visual design. Xi'an Hongbo Network Technology Co., Ltd. website construction system suffers from SQL injection vulnerability. Attackers can...

7.8AI score
SaveExploits0
Rows per page
Query Builder