Lucene search
+L

91 matches found

Prion
Prion
•added 2022/04/12 4:15 p.m.•25 views

Sql injection

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

7.5CVSS9.8AI score0.01314EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/04/12 3:30 p.m.•36 views

CVE-2022-27473

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

10AI score0.01314EPSS
SaveExploits1References2
CVE
CVE
•added 2022/04/12 3:30 p.m.•88 views

CVE-2022-27473

The connected sources confirm CVE-2022-27473 is a SQL injection in Roothub 2.6.0’s Topics Searching feature, exploitable via the s parameter to execute arbitrary SQL remotely due to lack of input validation. Affected: Roothub 2.6.0; Root cause: unsafely assembled SQL from external input. Practica...

9.8CVSS9.8AI score0.01314EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/04/12 3:30 p.m.•75 views

CVE-2022-27472

The connected documents confirm CVE-2022-27472 affects Roothub 2.6.0, specifically the Topics Counting feature. The vulnerability is a SQL injection exploitable via the s parameter, allowing remote attackers to execute arbitrary SQL commands and potentially access or modify data in the database. ...

9.8CVSS9.8AI score0.01314EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/04/12 3:30 p.m.•36 views

CVE-2022-27472

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

10AI score0.01314EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•7 views

CVE-2022-27473: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

9.8CVSS8.6AI score0.01314EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•16 views

Roothub SQL注入漏洞

Roothub is a forum system developed using SSM and MySQL.Roothub suffers from a SQL injection vulnerability, which stems from the lack of validation of external input SQL statements in the s parameter of the Topics Searching feature, and can be exploited by attackers to execute illegal SQL command...

9.8CVSS8.7AI score0.01314EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•7 views

CVE-2022-27472: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Topics Counting feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

9.8CVSS8.6AI score0.01314EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•2 views

PT-2022-18442

Name of the Vulnerable Software and Affected Versions Roothub version 2.6.0 Description The issue allows unauthorized attackers to execute arbitrary SQL commands via the s parameter in the Topics Searching feature. This enables remote exploitation. Recommendations For Roothub version 2.6.0,...

9.8CVSS6.4AI score0.01314EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•5 views

PT-2022-18441

Name of the Vulnerable Software and Affected Versions Roothub version 2.6.0 Description The issue allows unauthorized attackers to execute arbitrary SQL commands remotely via the s parameter in the Topics Counting feature. This enables attackers to potentially access or manipulate sensitive data...

9.8CVSS6.4AI score0.01314EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/04/12 12:00 a.m.•18 views

Roothub SQL注入漏洞

Roothub is a forum system developed using SSM and MySQL.Roothub is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the s parameter of the Topics Counting feature, and can be exploited by attackers to execute illegal SQL commands to steal...

9.8CVSS8.6AI score0.01314EPSS
SaveExploits1References3
Rows per page
Query Builder