Lucene search
+L

13555 matches found

CNVD
CNVD
added 2022/04/24 12:0 a.m.50 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35534)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=siteoptions&social=display&value=0&sid=midsid parameter missing validation of external...

9.8CVSS3.2AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.47 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35525)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & social=remove & sid= where the sid parameter lacks validation for externa...

9.8CVSS3.6AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.61 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35536)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from the lack of validation of external input SQL in the /admin.php?id=posts & action=display & value=1 &...

9.8CVSS3.2AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.59 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35526)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & action=displaygoal & value=1 & roleid= where the roleid parameter is...

9.8CVSS3.3AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.53 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35531)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=delete & msgid= where the msgid parameter lacks validation for external...

9.8CVSS3.4AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/24 12:0 a.m.64 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35522)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=display & value=Show & userid= where the userid parameter lacks validati...

9.8CVSS3.2AI score0.0122EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/18 12:0 a.m.25 views

McAfee Agent SQL Injection Vulnerability

Mcafee McAfee Agent MA is a client component from Mcafee that provides secure communication between ePolicy Orchestrator antivirus management platform and the managed products.A SQL injection vulnerability exists in versions prior to McAfee Agent 5.7.6, which stems from the application Lack of...

6CVSS3AI score0.00959EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2022/04/15 12:0 a.m.44 views

Roothub SQL Injection Vulnerability

Roothub is a forum system developed using SSM and MySQL.Roothub is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the s parameter of the Topics Counting feature, and can be exploited by attackers to execute illegal SQL commands to steal...

9.8CVSS5.4AI score0.01294EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.32 views

PHPGURUKUL Zoo Management System SQL Injection Vulnerability

PHPGURUKUL Zoo Management System is a zoo management system from the PHPGurukul Phpgurukul team. PHPGURUKUL Zoo Management System v1.0 is vulnerable to SQL injection, which stems from a lack of filtering in the classid parameter in /publichtml/animals, and can be exploited by attackers to execute...

8.8CVSS4.5AI score0.01518EPSS
SaveExploits3References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.42 views

Online Banking System SQL Injection Vulnerability (CNVD-2022-71426)

Online Banking System is a simple banking system project used to manage bank customers' accounts and process basic customer transactions. A SQL injection vulnerability exists in Online Banking System, which stems from the lack of filtering and transfer of SQL data in the employee ID and employee...

6.5CVSS3.4AI score0.00957EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.17 views

CSZ CMS SQL Injection Vulnerability (CNVD-2022-30781)

CSZ CMS is a PHP-based open source content management system CMS. CSZ CMS version 1.2.2 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in cszcmsadminMemberseditUser and can be exploited by attackers to execute illegal SQL...

9.8CVSS5.7AI score0.01107EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.25 views

Atom.CMS SQL Injection Vulnerability

CMS is a content management system from The Digital Craft personal developer in the U.S. A SQL injection vulnerability exists in Atom.CMS version 2.0, which stems from a lack of validation of external input SQL statements in Atom.CMSadminajaxblur-save.php, which could be exploited by attackers to...

9.8CVSS6.1AI score0.01408EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/04/15 12:0 a.m.55 views

Movie Seat Reservation System SQL Injection Vulnerability

Movie Seat Reservation System is a seat reservation system from an individual developer.Movie Seat Reservation System is vulnerable to SQL injection, which can be exploited by attackers to execute malicious SQL commands...

9.8CVSS6.1AI score0.01802EPSS
SaveExploits3References1
CNVD
CNVD
added 2022/04/14 12:0 a.m.42 views

Car Rental System SQL Injection Vulnerability (CNVD-2022-85098)

Car Rental System is a car rental system by individual developer AMEY THAKUR in India. car Rental System v1.0 is vulnerable to SQL injection, which originates from the lack of SQL data filtering for the id parameter in /CarRental/booking.php, and can be exploited by attackers to execute illegal S...

8.8CVSS6.7AI score0.01518EPSS
SaveExploits3References1
NVD
NVD
added 2022/04/12 4:15 p.m.19 views

CVE-2022-27473

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

9.8CVSS0.01294EPSS
SaveExploits1References2
Prion
Prion
added 2022/04/12 4:15 p.m.17 views

Sql injection

SQL injection vulnerability in Topics Searching feature of Roothub 2.6.0 allows unauthorized attackers to execute arbitrary SQL commands via the "s" parameter remotely...

7.5CVSS9.8AI score0.01294EPSS
SaveExploits1References2Affected Software1
RedHat Linux
RedHat Linux
added 2022/04/07 9:5 a.m.79 views

Important: Red Hat Security Advisory: RHV-H security update (redhat-virtualization-host) 4.3.22

An update for redhat-release-virtualization-host and redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

9.8CVSS7.8AI score0.73188EPSS
SaveExploits7References14
CNVD
CNVD
added 2022/04/07 12:0 a.m.34 views

SourceCodester Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform that helps a university or college manage student information and academic records. SourceCodester Simple Student Information System version 1.0 is vulnerable to SQL injection, which can be exploited by attackers to send...

10CVSS3.1AI score0.01735EPSS
SaveExploits1References1
NVD
NVD
added 2022/04/01 11:15 p.m.21 views

CVE-2021-32953

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

9.8CVSS0.01199EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/04/01 10:17 p.m.9 views

CVE-2021-32953 MDT AutoSave SQL Injection

An attacker could utilize SQL commands to create a new user MDT AutoSave versions prior to v6.02.06 and update the user’s permissions, granting the attacker the ability to login...

9.8CVSS7.5AI score0.01199EPSS
SaveExploits0References1
Rows per page
Query Builder