Lucene search
K

1174 matches found

Prion
Prion
added 2022/06/15 4:15 p.m.14 views

Sql injection

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.2.0 through 3.2.9 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM...

7.5CVSS9.4AI score0.00247EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2022/06/15 12:0 a.m.12 views

WordPress Bestbooks plugin SQL注入漏洞

WordPress and others are products of the WordPress Foundation. WordPress is a blogging platform developed in PHP. stb and others are products of the WordPress Foundation. stb is a single-file public domain library for C/C. WordPress plugin is an application plugin. WordPress Bestbooks plugin 2.6....

9.8CVSS2.7AI score0.68016EPSS
Exploits2References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.18 views

Online Car Wash Booking System SQL注入漏洞(CNVD-2022-53345)

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=bookings /viewdetails&id=page lacks validation of external input SQL...

9.8CVSS4.7AI score0.00264EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.18 views

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteteam lacks validation of external input SQL statements, whi...

9.8CVSS4.8AI score0.38136EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.9 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44732)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System version v1.0 is vulnerable to S...

7.2CVSS3.9AI score0.00274EPSS
Exploits0References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.12 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44725)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System v1.0 version has a SQL injectio...

7.2CVSS3.2AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/09 12:0 a.m.20 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

9.8CVSS4.4AI score0.00264EPSS
Exploits1References1
Prion
Prion
added 2022/06/06 7:15 p.m.10 views

Sql injection

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

7.5CVSS9.5AI score0.00111EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/06 4:20 p.m.16 views

CVE-2022-31768

IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database...

5.3CVSS9.7AI score0.00111EPSS
Exploits0References2
Veracode
Veracode
added 2022/06/03 2:38 p.m.53 views

Denial Of Service (DoS)

mariaDB is vulnerable to denial of service. The vulnerability exists due to an issue in the component Usedtablesandconstcache::usedtablesandconstcachejoin allowing an attackers to crash the system via specially crafted SQL statements...

7.5CVSS6.8AI score0.00158EPSS
Exploits1References5Affected Software5
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Online Ordering System SQL注入漏洞

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version 2.3.2 is vulnerable to a SQL injection vulnerability that originates in /ordering/index.php?q=products&id=The page lacks validation for external input SQL statements, whic...

9.8CVSS6AI score0.00264EPSS
Exploits1References2
CNVD
CNVD
added 2022/05/31 12:0 a.m.16 views

CSCMS Music Portal System SQL Injection Vulnerability (CNVD-2022-45901)

CSCMS Music Portal System is a diversified content management system from China Sunshine Network Technology CSCMS, Inc. A SQL injection vulnerability exists in CSCMS Music Portal System, which originates from the missing validation of the id parameter at /admin.php/pic/admin/pic/del for external...

9.8CVSS3AI score0.00337EPSS
Exploits1References1
Veracode
Veracode
added 2022/05/27 12:38 a.m.27 views

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in Createtmptable::finalize which allows an attacker to crash the application via specially malicious SQL statements...

7.5CVSS7.6AI score0.00217EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:30 a.m.22 views

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component Itemfuncin::cleanup which allows an attacker to exploit this via specially crafted SQL statements causing a crash of the system...

7.5CVSS7.7AI score0.00323EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:30 a.m.30 views

Use After Free

MariaDB is vulnerable to Use After Free. The vulnerability exists due to a memory corruption via the component Itemargs::walkarg, allowing an attacker to exploit the vulnerability via specially crafted SQL statements...

7.5CVSS7.8AI score0.00323EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:27 a.m.25 views

Use-After-Free

mariadb is vulnerable to use-after-free. The vulnerability exists in the component mystrcasecmp8bit which allows an attacker to cause a crash via specially crafted SQL statements...

7.5CVSS7.6AI score0.00238EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:26 a.m.26 views

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. The vulnerability exists in the component 1Field::setdefault1 which allows an attacker to cause an application crash via specially crafted SQL statements...

7.5CVSS7.6AI score0.00217EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:26 a.m.20 views

Denial Of Service (DoS)

mariadb is vulnerable to denial of service. An issue in the component mydecimal::operator allows remote attackers to cause a denial of service via specially crafted SQL statements...

7.5CVSS7.5AI score0.00295EPSS
Exploits1References9Affected Software3
Veracode
Veracode
added 2022/05/27 12:25 a.m.33 views

Buffer Overflow

mariadb is vulnerable to buffer overflow. The vulnerability exists due to decimalbinsize which allows an attacker to cause a crash via specially crafted SQL statements...

7.5CVSS7.8AI score0.00245EPSS
Exploits1References9Affected Software3
CNVD
CNVD
added 2022/05/26 12:0 a.m.16 views

ChatBot Application with a Suggestion Feature SQL Injection Vulnerability

ChatBot Application with a Suggestion FeatureA ChatBot application with a suggestion feature. chatBot Application with a Suggestion Feature v1.0 is vulnerable to a SQL injection vulnerability in /simple chatbot/classes/Master.php?f=deleteresponse, id is missing validation for external input SQL...

6.5CVSS3AI score0.00257EPSS
Exploits1Affected Software1
Rows per page
Query Builder