Lucene search
+L

226 matches found

BDU FSTEC
BDU FSTEC
•added 2022/04/28 12:00 a.m.•17 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the /opensis/modules/grades/InputFinalGrades.php parameter...

9.8CVSS8.2AI score0.01348EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•14 views

The vulnerability of the QuerySet.explain() function implementation in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the QuerySet.explain function implementation in the Django web application framework is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of...

10CVSS7.3AI score0.02943EPSS
SaveExploits0References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/25 12:00 a.m.•11 views

The vulnerability of the sql/sql_class.cc component in the MariaDB database management system allows a hacker to cause a service failure.

The vulnerability of the sql/sqlclass.cc component in the MariaDB database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

7.5CVSS7.5AI score0.02264EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/04/05 12:00 a.m.•13 views

The vulnerabilities of the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system allow a violator to access confidential data, compromise its integrity, and cause service failures.

The vulnerabilities in the components Kernel/Output/HTML/PreferencesCustomQueue.pm, Kernel/System/CustomerCompany.pm, Kernel/System/Ticket/IndexAccelerator/RuntimeDB.pm, Kernel/System/Ticket/IndexAccelerator/StaticDB.pm, and Kernel/System/TicketSearch.pm of the OTRS ticket request system are...

9CVSS7.2AI score0.01322EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/03/31 12:00 a.m.•16 views

The vulnerability in the virtual learning environment Moodle, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL queries in the database.

The vulnerability in the virtual training environment Moodle is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries in the database...

10CVSS8.1AI score0.00934EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
•added 2022/03/04 12:00 a.m.•23 views

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism, related to the lack of protection measures for the SQL query structure, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft Defender for IoT’s threat detection mechanism is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a attacker to execute arbitrary code...

9CVSS8.2AI score0.03825EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•22 views

The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Roundcube webmail client stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code using the search or searchparams parameters...

9.8CVSS8.6AI score0.69882EPSS
SaveExploits1References12Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•12 views

The vulnerability of the host_alt_filter2 parameter in the device_list.php script of the Advantech R-SeeNet router monitoring software allows a hacker to disclose protected information.

The vulnerability of the hostaltfilter2 parameter in the devicelist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/17 12:00 a.m.•11 views

The vulnerability of the AADI GeoView Webservice, a software tool for meteorological observations, lies in the lack of protection for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the AADI GeoView Webservice software for meteorological observations lies in the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

10CVSS8.2AI score0.01984EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/07 12:00 a.m.•14 views

The vulnerability of the username_filter parameter in the user_list.php script of the Advantech R-SeeNet monitoring software allows a hacker to disclose protected information.

The vulnerability of the usernamefilter parameter in the userlist.php script of the Advantech R-SeeNet monitoring software relates to the lack of protection for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially...

6.8CVSS7AI score0.01144EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/10/27 12:00 a.m.•11 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the NamesList.php parameter...

10CVSS8.2AI score0.22669EPSS
SaveExploits1References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/09/17 12:00 a.m.•18 views

The vulnerability of the software used to implement the hypertext environment in the Centreon IT infrastructure monitoring software allows a hacker to execute arbitrary SQL commands.

The vulnerability of the software for implementing the hypertext environment in the Centreon IT infrastructure monitoring software is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands...

9.3CVSS8.2AI score0.02115EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/08/25 12:00 a.m.•13 views

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system allows attackers to perform cross-site scripting attacks.

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9.8CVSS7.5AI score0.01476EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/08/10 12:00 a.m.•13 views

The vulnerability of the CASAP Automated Enrollment System software lies in its lack of measures to protect the SQL query structure, allowing attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the CASAP Automated Enrollment System lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information through the parameter “id...

10CVSS7.9AI score0.01517EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/29 12:00 a.m.•15 views

The vulnerability of the get_topic_info() function (sys/CODOF/Forum/Topic.php) in the Codoforum forum creation software allows a violator to execute arbitrary code.

The vulnerability of the gettopicinfo function sys/CODOF/Forum/Topic.php in the Codoforum forum creation software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary code on the target system remotely...

10CVSS8.3AI score0.04915EPSS
SaveExploits1References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•13 views

The vulnerability in the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website allows attackers to execute arbitrary SQL queries.

The vulnerability of the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

5.3CVSS6.3AI score0.02984EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•14 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of DataTables libraries is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

9.8CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•19 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•27 views

The vulnerability of Dollibarr’s software lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL commands.

The vulnerability of Dollibarr’s software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

10CVSS8.2AI score0.03959EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2021/01/26 12:00 a.m.•14 views

The vulnerability of the VMware SD-WAN Orchestrator management platform, related to the failure to implement security measures for SQL query structures, allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the VMware SD-WAN Orchestrator management platform is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS7AI score0.01154EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder