Lucene search
K

8196 matches found

CNVD
CNVD
added 2019/10/28 12:0 a.m.1 views

SQL injection vulnerability in ad***_to***.php file pi*** parameter in seacms backend

seacms ocean film and television management system, ocean cms is based on PHP + MySql technology development of video on demand system. seacms background adto.php file pi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

8AI score
Exploits0
CNVD
CNVD
added 2019/10/25 12:0 a.m.1 views

TpShop Go***.php page fi*** parameter has SQL injection vulnerability

Tpshop is an open source mall system of Shenzhen SoBao Network Co. TpShop Go.php page fi parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/10/25 12:0 a.m.1 views

Xiamen Yi Shang Network Technology website building system SQL injection vulnerability

Xiamen Yi Shang Network Technology Co., Ltd. is one of the Internet application service providers; is a commitment to enterprise e-commerce consulting and solutions and enterprise information technology services, a professional IT company, with a number of products and services related to the...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/25 12:0 a.m.1 views

Anhui Siwatu Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Hefei Siwatu network technology limited liability company is mainly engaged in software development, computer graphics production, network cabling, computer installation and maintenance, website production, maintenance, promotion, graphic design, domain name service. Anhui Siwatu Network Technolo...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.4 views

Sourcecodester Online Grading System SQL Injection Vulnerability

Sourcecodester Online Grading System is a student information management system. The system provides functions such as student information management and online grading. A SQL injection vulnerability exists in the Sourcecodester Online Grading System. An attacker can exploit this vulnerability to...

9.8CVSS8AI score0.0136EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/24 12:0 a.m.1 views

SQL Injection Vulnerability in kkcms

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.1 views

SQL Injection Vulnerability in Chengdu JINWEI TECHNOLOGY CO.

Chengdu, Chengdu, this network technology is a Chengdu, engaged in website planning, web design, website construction and development, website optimization, Internet marketing and other professional services in the field of network technology limited company. A SQL injection vulnerability exists ...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/24 12:0 a.m.2 views

Sourcecodester Hotel and Lodge Management System SQL Injection Vulnerability

Sourcecodester Hotel and Lodge Management System is a hotel and lodge management system. A SQL injection vulnerability exists in Sourcecodester Hotel and Lodge Management System version 1.0, which is caused by a lack of validation of externally entered SQL statements in a database-based applicati...

9.8CVSS8.2AI score0.014EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/23 12:0 a.m.5 views

Zoho ManageEngine OpManager SQL Injection Vulnerability

Zoho ManageEngine OpManager is a suite of network, server and virtualization monitoring software from Zoho. Zoho ManageEngine OpManager suffers from a SQL injection vulnerability that arises from a database-based application that lacks validation of externally entered SQL statements. An attacker...

9.8CVSS8.2AI score0.81549EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/23 12:0 a.m.2 views

FusionPBX SQL Injection Vulnerability

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. An SQL injection vulnerability exists in FusionPBX. An attacker can exploit this...

8.8CVSS8.3AI score0.01197EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/22 12:0 a.m.1 views

SQL Injection Vulnerability in zhicms Background ad***.php Page

ZhiCms is an enterprise building system based on PHP and mysql technology. A SQL injection vulnerability exists in the ad.php page in the background of zhicms, which can be exploited by attackers to obtain sensitive information such as database...

7.8AI score
Exploits0
OSV
OSV
added 2019/10/21 4:12 p.m.0 views

GHSA-58V4-QWX5-7F59 SQL Injection in knex

knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB...

9.8CVSS6AI score0.01159EPSS
Exploits1References2
CNVD
CNVD
added 2019/10/21 12:0 a.m.3 views

WiKID Systems 2FA Enterprise Server searchDevices.jsp SQL Injection Vulnerability

WiKID Systems 2FA Enterprise Server is a two-factor authentication server from WiKID Systems, USA. A SQL injection vulnerability exists in WiKID Systems 2FA Enterprise Server searchDevices.jsp, which can be exploited by an attacker to submit a specially crafted SQL request to manipulate a databas...

8.8CVSS8.3AI score0.02143EPSS
Exploits3References1
CNVD
CNVD
added 2019/10/18 12:0 a.m.0 views

Bypass Vulnerability in Website Security Dog's SQL Injection Blocking Feature (CNVD-2019-41613)

Security Dog is a comprehensive server security protection tool that integrates server security protection and security management. A bypass vulnerability exists in the SQL injection blocking feature of Website Security Dog. An attacker can bypass the SQL injection blocking feature of Website...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/10/18 12:0 a.m.4 views

YouPHPTube subscribe.json.php file SQL Injection Vulnerability

YouPHPTube is a PHP-based video website system. A SQL injection vulnerability exists in the /objects/subscribe.json.php file in YouPHPTube version 7.6. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit th...

8.8CVSS8.2AI score0.01064EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/17 12:0 a.m.1 views

WordPress wti-like-post plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wti-like-post is a plugin used to add likes to web pages. A SQL injection vulnerability exists in the WordPress wti-like-post plugin. ...

9.8CVSS8AI score0.0239EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/16 12:0 a.m.2 views

WordPress awesome-filterable-portfolio plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. awesome-filterable-portfolio is a plugin that supports the creation, management and publishing of personal portfolios. A SQL injection...

7.2CVSS8AI score0.01918EPSS
Exploits1References1
CNVD
CNVD
added 2019/10/15 12:0 a.m.3 views

WordPress wpDataTables Lite SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wpDataTables Lite is a chart creation plugin used in it. WordPress wpDataTables Lite has a SQL injection vulnerability. The...

7.2CVSS8AI score0.01447EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/15 12:0 a.m.1 views

Tooonyy dormsystem SQL Injection Vulnerability

Tooonyy dormsystem is a dormitory information management system. A SQL injection vulnerability exists in the admin.php file in versions 1.3 and earlier of Tooonyy dormsystem, which stems from a lack of validation of externally-entered SQL statements in database-based applications and can be...

9.8CVSS8AI score0.01072EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/14 12:0 a.m.1 views

SQL injection vulnerability in c**l.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.6AI score
Exploits0
Rows per page
Query Builder