Lucene search
+L

15508 matches found

Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•46 views

CVE-2019-6012

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2AI score0.01447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•6 views

CVE-2019-6012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2CVSS7.6AI score0.01447EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•12 views

PT-2019-17939

Name of the Vulnerable Software and Affected Versions wpDataTables Lite versions 2.0.11 and earlier Description A SQL injection issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For wpDataTables Lite versions 2.0.11 and earlier, update to a version lat...

7.2CVSS0.01447EPSS
SaveExploits0References4
Cloud Foundry
Cloud Foundry
•added 2019/12/18 12:00 a.m.•155 views

USN-4205-1: SQLite vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM...

8.8CVSS7.2AI score0.07966EPSS
SaveExploits2
Prion
Prion
•added 2019/12/09 8:15 p.m.•24 views

Sql injection

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

6.5CVSS9AI score0.01566EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2019/12/09 7:13 p.m.•29 views

CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

9.2AI score0.01566EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/09 12:00 a.m.•6 views

CVE-2015-3424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

8.8CVSS8.2AI score0.01566EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2019/12/09 12:00 a.m.•9 views

PT-2019-7178

Name of the Vulnerable Software and Affected Versions Accentis Content Resource Management System versions prior to the October 2015 patch Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the SIDX parameter. Recommendations For versions prior t...

8.8CVSS0.01566EPSS
SaveExploits2References2
NVD
NVD
•added 2019/11/20 8:15 p.m.•31 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS10AI score0.02504EPSS
SaveExploits0References4
Prion
Prion
•added 2019/11/20 8:15 p.m.•33 views

Sql injection

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

7.5CVSS9AI score0.02504EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2019/11/20 8:15 p.m.•49 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS7.5AI score0.02504EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•20 views

Centreon SQL Injection Vulnerability (CNVD-2019-42245)

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web versions prior to 2.8.28. The vulnerability ste...

8.8CVSS8.1AI score0.01836EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/23 11:15 p.m.•24 views

Sql injection

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

7.5CVSS10AI score0.014EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2019/10/17 7:15 p.m.•32 views

Sql injection

Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter...

6.5CVSS9.2AI score0.01749EPSS
SaveExploits3References3Affected Software1
RedhatCVE
RedhatCVE
•added 2019/10/04 9:48 p.m.•34 views

CVE-2008-0785

Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...

7.5CVSS8.4AI score0.05246EPSS
SaveExploits9References3
RedhatCVE
RedhatCVE
•added 2019/10/04 9:17 p.m.•26 views

CVE-2007-5976

SQL injection vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter...

6.5CVSS8.2AI score0.01307EPSS
SaveExploits1References3
zdt
zdt
•added 2019/10/04 12:00 a.m.•75 views

LabCollector 5.423 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: LabCollector Laboratory Information System 5.423 - Multiples SQL Injection Software Links/Project: https://www.labcollector.com/clientarea/downloads.php Version: LabCollector Laboratory Information System 5.423 Exploit Author:...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2019/09/29 12:00 a.m.•26 views

eBrigade SQL Injection Vulnerability (CNVD-2019-35774)

eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...

8.8CVSS8.2AI score0.01743EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/09/18 8:59 p.m.•46 views

CVE-2019-15301

A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...

10AI score0.01468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/18 12:00 a.m.•11 views

CVE-2019-15301: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the method Terrasoft.Core.DB.Column.Const in Terrasoft Bpm'online CRM-System SDK 7.13 allows attackers to execute arbitrary SQL commands via the value parameter...

9.8CVSS8.5AI score0.01468EPSS
SaveExploits0References2
Rows per page
Query Builder