Lucene search
K

8196 matches found

CNVD
CNVD
added 2019/10/14 12:0 a.m.2 views

SQL injection vulnerability in c***w.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.5AI score
Exploits0
CNVD
CNVD
added 2019/10/13 12:0 a.m.1 views

SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41065)

seacms ocean movie management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/10/10 12:0 a.m.1 views

SQL injection vulnerability in c**e.asp of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/10 12:0 a.m.1 views

Cisco Firepower Management Center SQL Injection Vulnerability (CNVD-2019-34733)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A SQL injection vulnerability exists in the web-based management interface in Cisco FMC, which stems from the program's failure to properly validate input. A remote attacker could exploit...

9CVSS8AI score0.02965EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.3 views

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS5.9AI score0.02965EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.3 views

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS5.9AI score0.02965EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.3 views

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS5.9AI score0.02965EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/10/09 12:0 a.m.2 views

The vulnerability in the web interface of the software-hardware management interface for Cisco Firepower Management Center allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing the software-hardware environment of Cisco Firepower Management Center is related to input validation errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

9CVSS5.9AI score0.02965EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2019/10/08 12:0 a.m.1 views

Chengdu Firefox Technology Co., Ltd. website builder system suffers from SQL injection vulnerabilities

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion and development of new technology areas of the network, mainly dedicated to the enterprise information technology services of professional network companies, with a number of Internet-related products and services. Chengdu Firef...

7.5AI score
Exploits0
CNVD
CNVD
added 2019/10/08 12:0 a.m.1 views

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

7.7AI score
Exploits0
Snyk
Snyk
added 2019/10/07 12:51 p.m.2 views

SQL Injection

Overview knex is a query builder for PostgreSQL, MySQL and SQLite3 Affected versions of this package are vulnerable to SQL Injection. None Remediation Upgrade knex to version 0.19.5 or higher. References - GitHub Commit - GitHub PR Credit: Snyk Security Research Team...

9.8CVSS7.3AI score0.01159EPSS
Exploits1References2
CNVD
CNVD
added 2019/10/07 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Zigong Tianqi Network System Co.

Zigong Tianqi Network System Co., Ltd. was founded in 1999, the company is committed to network construction. There is a SQL injection vulnerability in the website building system of Zigong Tianqi Network System Co., Ltd, which can be exploited by attackers to obtain sensitive information from th...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

SQL Injection Vulnerability in Business-to-Business Website Building System

Qingdao Business to Faith Network Technology Co., Ltd. was founded in March 2001, initially a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services, high-tech specialized companies, is one of the first batch of domestic Internet...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

SQL Injection Vulnerability in Student Assessment System of Citycom Technology

Shandong Chengtong Technology Co., Ltd. is a company mainly engaged in the development and sale of computer software and hardware; computer system integration services and other projects. There is a SQL injection vulnerability in the Student Literacy Assessment System of Chengtong Technology, whi...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

S-CMS php version enterprise website building system v3.0 SQL injection vulnerability in background aj*** N*** parameters (CNVD-2019-40101)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj N parameter there is a SQL injection vulnerability, t...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

S-CMS php version enterprise website builder system v3.0 SQL injection vulnerability in background aj***2 parameter

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj2 parameters exist SQL injection vulnerability,...

7.6AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.1 views

The vulnerability of the InnoDB component in the MySQL Database Management System allows attackers to gain access to modify, add, or delete data, causing system downtime or service failures.

The vulnerability of the InnoDB component in the MySQL Database Management System is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to modify, add, or delete data, causing system downtime or service failures...

7.5CVSS5.5AI score0.02594EPSS
Exploits0References9Affected Software12
BDU FSTEC
BDU FSTEC
added 2019/10/03 12:0 a.m.1 views

Vulnerability of the Server component: The MySQL Server database management system component, which allows a hacker to cause a service failure.

The vulnerability of the Server component: The DDL system for managing MySQL databases involves deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

6.8CVSS5.5AI score0.03212EPSS
Exploits0References11Affected Software13
BDU FSTEC
BDU FSTEC
added 2019/10/01 12:0 a.m.3 views

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management arises from the lack of protective measures for SQL query structures. This allows attackers to execute arbitrary code through SQL injection attacks.

The vulnerability of the “symfony/dependency-injection” service identifier on the Symfony software platform for web application development and management is related to the lack of measures to protect SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary code...

9.8CVSS6.1AI score0.05491EPSS
Exploits1References5Affected Software2
CNVD
CNVD
added 2019/09/29 12:0 a.m.4 views

eBrigade SQL Injection Vulnerability (CNVD-2019-35770)

eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...

8.8CVSS8.2AI score0.01743EPSS
Exploits1References1
Rows per page
Query Builder