Lucene search
+L

2905 matches found

CNNVD
CNNVD
added 2022/04/21 12:00 a.m.14 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=siteoptions&social=display&value=0&sid=midsid parameter missing validation of external...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.11 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from /admin.php?id=siteoptions&social=edit&sid=insid parameter missing validation of external input...

9.8CVSS6.2AI score0.00921EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.10 views

Student Grading System SQL注入漏洞

Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/20 12:00 a.m.10 views

Cisco Unified Communications Manager SQL注入漏洞

Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of the Unified Communications System from Cisco USA. The component provides a scalable, distributable, and highly available enterprise IP telephony call processing solution.Unified Communications...

8.1CVSS5.9AI score0.00828EPSS
SaveExploits0References5
OSV
OSV
added 2022/04/19 1:15 p.m.7 views

CVE-2022-27927

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable coursecode and/or customernumber parameter...

9.8CVSS5.8AI score0.13829EPSS
SaveExploits4References3
OSV
OSV
added 2022/04/15 5:15 a.m.10 views

ALPINE-CVE-2022-26651

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The funcodbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. Th...

9.8CVSS7.8AI score0.06976EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.11 views

Asterisk SQL注入漏洞

Asterisk is a PBX system software that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols.Asterisk suffers from a SQL injection vulnerability that can be exploited by attackers to cause user-supplied data to create corrupt SQL queries or possibly SQL injections...

9.8CVSS6AI score0.06976EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2022/04/11 12:00 a.m.11 views

JHipster SQL注入漏洞

JHipster is an open source application builder that develops web applications and microservices primarily using Angular or React and Spring Framework.JHipster suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements, whic...

8.1CVSS6.1AI score0.01356EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/04/05 8:15 p.m.5 views

CVE-2022-28467

Online Student Admission v1.0 was discovered to contain a SQL injection vulnerability via the txtapplicationID parameter...

9.8CVSS6AI score0.01079EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/03/28 12:00 a.m.8 views

WordPress plugin Wow Countdowns SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress Wow Countdowns plugin version 3.1.2 later has a SQL injection vulnerability, which stems from the plugin using the user The...

7.2CVSS6.2AI score0.01327EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2022/03/27 12:00 a.m.9 views

xiaohuanxiong CMS SQL注入漏洞

xiaohuanxiong is an open source comic CMS by guoguo individual developers. xiaohuanxiong version 1.0 is vulnerable to SQL injection, which originates from the id parameter in /app/controller/Books.php. No detailed vulnerability details are available...

9.8CVSS5.8AI score0.00956EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/22 12:00 a.m.26 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS6.1AI score0.01219EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/22 12:00 a.m.9 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS6.2AI score0.01219EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2022/03/21 12:00 a.m.22 views

WordPress plugin BookingPress SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. WordPress plugin BookingPress 1.0.11 version befor...

9.8CVSS8.4AI score0.37171EPSS
SaveExploits11References3
CNNVD
CNNVD
added 2022/03/16 12:00 a.m.10 views

Sourcecodester Online Project Time Management System SQL注入漏洞

Online Project Time Management System is a web-based online project time management system that provides an online platform for a company's employees to report/record their assigned time or time spent on each project resubmission. online project time management system A SQL injection vulnerabilit...

9.8CVSS6.1AI score0.02198EPSS
SaveExploits2References5
OSV
OSV
added 2022/03/15 6:15 p.m.10 views

CVE-2022-25488

Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...

9.8CVSS5.8AI score0.07148EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/14 12:00 a.m.8 views

GLPI SQL注入漏洞

GLPI is an open source IT and asset management software for individual developers. The software provides a full-featured IT resource management interface that you can use to build databases to fully manage IT computers, monitors, servers, printers, network devices, phones, and even toner cartridg...

9.8CVSS8.4AI score0.02122EPSS
SaveExploits4References5
CNNVD
CNNVD
added 2022/03/07 12:00 a.m.8 views

WordPress plugin AdRotate SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress AdRotate Plugin versions prior to 5.8.22. The vulnerability...

7.2CVSS6.2AI score0.01275EPSS
SaveExploits2References2
ATTACKERKB
ATTACKERKB
added 2022/03/04 2:15 p.m.3 views

CVE-2022-26201

Victor CMS v1.0 was discovered to contain a SQL injection vulnerability...

9.8CVSS5.9AI score0.01495EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/03/03 12:00 a.m.16 views

MingSoft Mcms SQL注入漏洞

MingSoft Mcms is China's MingFei MingSoft company's a complete open source J2ee system . A security vulnerability exists in MingSoft Mcms v5.2.4 that allows attackers to conduct SQL injection attacks via the search.do parameter in the file /mdiy/dict/listExcludeApp. No details of the vulnerabilit...

9.8CVSS5.8AI score0.06981EPSS
SaveExploits1References2
Rows per page
Query Builder