Lucene search
+L

15472 matches found

Cvelist
Cvelist
•added 2019/12/31 8:42 p.m.•39 views

CVE-2015-5591

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands...

7.5AI score0.02238EPSS
SaveExploits2References4
Mend
Mend
•added 2019/12/31 8:42 p.m.•8 views

CVE-2015-5591

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands...

8.6CVSS0.02238EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/31 12:00 a.m.•3 views

CVE-2015-5591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands...

7.2CVSS7.1AI score0.02238EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2019/12/31 12:00 a.m.•6 views

PT-2019-7193

Name of the Vulnerable Software and Affected Versions Zenphoto versions prior to 1.4.9 Description The issue allows remote administrators to execute arbitrary SQL commands due to a SQL injection vulnerability. Recommendations For versions prior to 1.4.9, update to version 1.4.9 or later to resolv...

7.2CVSS0.02238EPSS
SaveExploits2References6
Cvelist
Cvelist
•added 2019/12/26 3:16 p.m.•44 views

CVE-2019-6012

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2AI score0.01447EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/26 12:00 a.m.•5 views

CVE-2019-6012: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2CVSS7.6AI score0.01447EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/12/26 12:00 a.m.•9 views

PT-2019-17939

Name of the Vulnerable Software and Affected Versions wpDataTables Lite versions 2.0.11 and earlier Description A SQL injection issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For wpDataTables Lite versions 2.0.11 and earlier, update to a version lat...

7.2CVSS0.01447EPSS
SaveExploits0References4
Cloud Foundry
Cloud Foundry
•added 2019/12/18 12:00 a.m.•153 views

USN-4205-1: SQLite vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM...

8.8CVSS7.2AI score0.07966EPSS
SaveExploits2
Prion
Prion
•added 2019/12/09 8:15 p.m.•22 views

Sql injection

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

6.5CVSS9AI score0.01566EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2019/12/09 7:13 p.m.•27 views

CVE-2015-3424

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

9.2AI score0.01566EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/09 12:00 a.m.•4 views

CVE-2015-3424: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

8.8CVSS8.2AI score0.01566EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2019/12/09 12:00 a.m.•7 views

PT-2019-7178

Name of the Vulnerable Software and Affected Versions Accentis Content Resource Management System versions prior to the October 2015 patch Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the SIDX parameter. Recommendations For versions prior t...

8.8CVSS0.01566EPSS
SaveExploits2References2
NVD
NVD
•added 2019/11/20 8:15 p.m.•29 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS10AI score0.02504EPSS
SaveExploits0References4
Prion
Prion
•added 2019/11/20 8:15 p.m.•31 views

Sql injection

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

7.5CVSS9AI score0.02504EPSS
SaveExploits0References4Affected Software1
UbuntuCve
UbuntuCve
•added 2019/11/20 8:15 p.m.•47 views

CVE-2013-2091

SQL injection vulnerability in Dolibarr ERP/CRM 3.3.1 allows remote attackers to execute arbitrary SQL commands via the 'pays' parameter in fiche.php...

9.8CVSS7.5AI score0.02504EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•17 views

Centreon SQL Injection Vulnerability (CNVD-2019-42245)

Centreon Web is a set of open source system monitoring tools from the French company Centreon . The product mainly provides monitoring functions on the network , system and application resources . A SQL injection vulnerability exists in Centreon Web versions prior to 2.8.28. The vulnerability ste...

8.8CVSS8.1AI score0.01836EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/23 11:15 p.m.•21 views

Sql injection

Sourcecodester Hotel and Lodge Management System 1.0 is vulnerable to unauthenticated SQL injection and can allow remote attackers to execute arbitrary SQL commands via the id parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details...

7.5CVSS10AI score0.014EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2019/10/17 7:15 p.m.•29 views

Sql injection

Multiple SQL injection vulnerabilities in Logs.jsp in WiKID 2FA Enterprise Server through 4.2.0-b2053 allow authenticated users to execute arbitrary SQL commands via the source or subString parameter...

6.5CVSS9.2AI score0.01749EPSS
SaveExploits3References3Affected Software1
RedhatCVE
RedhatCVE
•added 2019/10/04 9:48 p.m.•32 views

CVE-2008-0785

Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbitrary SQL commands via the 1 graphlist parameter to graphview.php, 2 leafid and id parameters to tree.php, 3 localgraphid parameter to graphxport.php, and 4...

7.5CVSS8.4AI score0.05246EPSS
SaveExploits9References3
RedhatCVE
RedhatCVE
•added 2019/10/04 9:17 p.m.•24 views

CVE-2007-5976

SQL injection vulnerability in dbcreate.php in phpMyAdmin before 2.11.2.1 allows remote authenticated users with CREATE DATABASE privileges to execute arbitrary SQL commands via the db parameter...

6.5CVSS8.2AI score0.01307EPSS
SaveExploits1References3
Rows per page
Query Builder