Lucene search
+L

2905 matches found

CNNVD
CNNVD
added 2023/10/10 12:00 a.m.10 views

Election Services SQL Injection Vulnerability

Election Services is an application from Election Services, Inc. Election Services Internet Election Service suffers from a security vulnerability that stems from susceptibility to SQL injection attacks, allowing an unauthenticated, remote attacker to read or modify data for any election that...

10CVSS7.8AI score0.01051EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/10/05 12:00 a.m.7 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. A security vulnerability exists in PrestaShop, which stems from a SQL injection vulnerability in the disablejson.php...

9.8CVSS8AI score0.00504EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/05 12:00 a.m.11 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution offers multiple payment methods, SMS alerts and product image zoom. A security vulnerability exists in PrestaShop due to an SQL injection vulnerability in the supercheckout.php component of...

9.8CVSS7.8AI score0.00787EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/03 12:00 a.m.9 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts, and product image scaling. PrestaShop suffers from an SQL injection vulnerability that originates from improper neutralization of SQL parameters...

9.8CVSS8.1AI score0.00535EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/03 12:00 a.m.11 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop suffers from an SQL injection vulnerability that originates from improper neutralization of SQL parameters ...

9.8CVSS8.1AI score0.00535EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/10/02 12:00 a.m.8 views

PrestaShop SQL Injection Vulnerability

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, SMS alerts and product image scaling. PrestaShop suffers from a SQL injection vulnerability that originates from the disablejson.php component of the Change...

9.8CVSS8AI score0.00518EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/30 12:00 a.m.8 views

PT-2023-9164 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: PrestaShop Buy Addons baproductzoommagnifier module versions 1.0.16 and before Description: The issue is related to a lack of protection against SQL structure attacks in the BaproductzoommagnifierZoomModuleFrontController::run method of the...

10CVSS9.8AI score0.00748EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.9 views

Tongda OA SQL Injection Vulnerability

Tongda2000 is a web-based intelligent office system from China Tongda Tongda. Tongda OA 2017 suffers from a SQL injection vulnerability that stems from the fact that incorrect operation of the parameter EXPERTID can lead to SQL injection...

9.8CVSS8AI score0.00785EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.10 views

SourceCodester Best Courier Management System SQL Injection Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. SourceCodester Best Courier Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter id in the file viewparcel.php that can lead to sql injection...

8.8CVSS8.4AI score0.0062EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.10 views

ECShop SQL Injection Vulnerability

ShopeX ECShop is an open source mall system of the Chinese business school ShopeX company . Support PC + H5 + APP + small program mall , source code free download experience , suitable for enterprise development and build mall. ECShop 4.1.1 version of the existence of SQL injection vulnerability ...

8.8CVSS8.3AI score0.00546EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/29 12:00 a.m.8 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. TONGDA Office Anywhere 2017 suffers from a SQL injection vulnerability that stems from the fact that incorrect operation of the parameter RECRUITMENTID can lead to SQL injection...

7.5CVSS8AI score0.00624EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.9 views

SiberianCMS SQL Injection Vulnerability

Siberian is an open source CMS from Siberian. A SQL injection vulnerability exists in SiberianCMS. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

8.8CVSS7.7AI score0.00725EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.8 views

WS_FTP Server SQL Injection Vulnerability

Progress Software WSFTP Server is an effective and highly manageable FTP server from Progress Software, USA. A SQL injection vulnerability exists in WSFTP Server versions prior to 8.7.4, 8.8.2. An attacker exploiting this vulnerability is able to infer information about the structure and content ...

8.2CVSS7.8AI score0.00854EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.8 views

Toll Tax Management System SQL Injection Vulnerability

Toll Tax Management System is a toll tax management system from the individual developer Carlo Montero. A security vulnerability exists in Sourcecodester Toll Tax Management System v1 that stems from vulnerability to SQL injection attacks...

7.2CVSS7.8AI score0.00655EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/09/23 12:00 a.m.13 views

Online Job Portal SQL Injection Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A security vulnerability exists in Online Job Portal version v.2020 that could allow a remote attacker to execute arbitrary code via the ForPass.php component...

9.8CVSS7.7AI score0.00953EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/17 12:00 a.m.8 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere version 2017, which stems from a SQL injection vulnerability in the parameter RELATIVESID...

8.8CVSS8AI score0.0059EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/09/17 12:00 a.m.8 views

PT-2023-31521 · Sourcecodester · Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the Simple Membership System, affecting an unknown functionality of the file club validator.php. The manipulation of the club argument leads to SQL...

7.5CVSS8AI score0.00533EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.10 views

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v.3.6, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a carefully crafted...

9.8CVSS7.8AI score0.01409EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.7 views

Lenosp SQL Injection Vulnerability

Lenosp is a Spring Boot 2.0 rapid development modular scaffolding organized by Zhengzhou Programmers zzdevelop in China. A security vulnerability exists in Lenosp versions 1.0.0 through 1.2.0, which stems from easy SQL injection via the Log Query module...

6.5CVSS7.9AI score0.00484EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.11 views

BlackBerry AtHoc SQL Injection Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a SQL injection vulnerability in the...

7.2CVSS7.8AI score0.0049EPSS
SaveExploits0References3
Rows per page
Query Builder