Lucene search
K

8196 matches found

CNVD
CNVD
added 2019/09/05 12:0 a.m.1 views

S-CMS php version hospital website building system v1.0 SQL injection vulnerability in background aj***.php page (CNVD-2019-32865)

S-CMS php version hospital website building system is a PHP based website building system. S-CMS php version hospital website builder system v1.0 has a SQL injection vulnerability in the background aj.php page, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/09/05 12:0 a.m.3 views

Epignosis eFront LMS SQL Injection Vulnerability

Epignosis eFront LMS is a suite of online e-learning platforms from Epignosis, Inc. in the United States. The platform provides test building, assignment management, internal messaging, forums and online chat. A SQL injection vulnerability exists in Epignosis eFront LMS version 5.2.12 and earlier...

6.5CVSS8.1AI score0.01025EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

SQL Injection Vulnerability in the 'nrfl' Parameter of the APP Interface of Mobile Phone Letter (Mass Version)

Jiangsu Chuhuai Software Technology Development Co., Ltd. is a high-tech industry software company integrating software development, system integration and informationization construction. There is a SQL injection vulnerability in the Mobile Letter and Visit Mass Version APP, which can be exploit...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/03 12:0 a.m.3 views

WordPress gigpress plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A SQL injection vulnerability exists in the WordPress...

7.2CVSS8.1AI score0.01408EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.2 views

WordPress sharebar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A SQL injection vulnerability exists in the WordPress sharebar plugi...

9.8CVSS8AI score0.01815EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.3 views

Panasonic Video Insight VMS SQL Injection Vulnerability

Panasonic Video Insight VMS is an enterprise surveillance video management system from Panasonic Corporation Japan. A SQL injection vulnerability exists in Panasonic Video Insight VMS 7.3.2.5 and earlier versions, which can be exploited by remote attackers to execute arbitrary SQL statements...

8.8CVSS8.5AI score0.01522EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.1 views

SQL Injection Vulnerability in PHPMyWind infol***_s***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind infols.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/09/01 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of 1039 Technology Ltd.

Beijing One Zero Three Nine Technology Development Co., Ltd 1039 for short is the first high-tech enterprise specializing in standardized software development and large-scale application platform for the training industry, and it is the best partner for information construction in the training...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/31 12:0 a.m.4 views

SQL Injection Vulnerability in the Frontend of Tongda OA System of Beijing Tongda Science and Technology Co.

Ltd. is subordinate to China National Weapons Industry Information Center CNWIIC, which is referred to as Tongda Xinke. It is a high-tech team with the main business of collaborative management software development and implementation, service and consulting. There is a SQL injection vulnerability...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/08/29 12:0 a.m.1 views

Prophecy International Snare Central SQL Injection Vulnerability

Prophecy International Snare Central is a suite of log collection and management tools from Prophecy International Australia. A SQL injection vulnerability exists in Prophecy International Snare Central versions prior to 7.4.5, which stems from a lack of validation of externally-entered SQL...

7.2CVSS8.2AI score0.01108EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/29 12:0 a.m.1 views

SQL injection vulnerability in the background aj***.php page of S-CMS government website builder system

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the background aj.php page of the S-CMS Government Building System, which can be exploited by an attacker to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/29 12:0 a.m.2 views

WordPress rsvpmaker plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rsvpmaker is used in one of the event scheduling and RSVP tracking plugin. A SQL injection vulnerability exists in WordPress...

9.8CVSS8AI score0.02244EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/28 12:0 a.m.2 views

SQL injection vulnerability in the S_show parameter of the aj***.php page of the S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS school website builder system aj.php page Sshow parameter SQL injection vulnerability, an attacker can use the vulnerability to...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/28 12:0 a.m.1 views

S-CMS government website builder system aj***.php page N_type parameter has SQL injection vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. S-CMS government website builder system aj.php page Ntype parameter there is a SQL injection vulnerability, an attacker can...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/28 12:0 a.m.3 views

WordPress appointment-booking-calendar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. appointment-booking-calendar is an online appointment management plugin used in it. A SQL injection vulnerability exists in the...

9.8CVSS8AI score0.01815EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/27 12:0 a.m.2 views

WordPress gallery-photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. gallery-photo-gallery is a responsive gallery plugin used in it. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8AI score0.01815EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/26 12:0 a.m.1 views

SQL Injection Vulnerability in Teaching Quality Assurance System of Shanghai Shangding Software Technology Co.

The Teaching Quality Assurance System is a closed-loop management system that adopts a new business architecture and process handling model for the planning and initiation, execution and implementation, analysis and feedback of various teaching quality activities. Shanghai Shangding Software...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/26 12:0 a.m.2 views

FredReinink Wellness-app SQL Injection Vulnerability

FredReinink Wellness-app is a web-based fitness tracking application. A SQL injection vulnerability exists in versions of FredReinink Wellness-app prior to 2019-06-19, which can be exploited by an attacker to execute illegal SQL commands...

9.8CVSS8.2AI score0.01371EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.1 views

SQL Injection Vulnerability in We*** Interface of Shared Human Resource Management System

Dongguan City, the same share software technology limited company is a focus on manufacturing, commercial circulation, government departments, enterprises and institutions, such as management software research and development and service company. The We interface of Tongxiang Human Resources...

7.5AI score
Exploits0
Rows per page
Query Builder