Lucene search
+L

472 matches found

CNVD
CNVD
added 2021/05/08 12:0 a.m.5 views

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-35559)

Extreme CMS is an open source and free CMS web content management system in PHP language. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/05/08 12:0 a.m.11 views

b2evolution Command Injection Vulnerability

b2evolution is a community content management system based on PHP and MySQL. A command injection vulnerability exists in b2evolution v7.2.2-stable, which can be exploited by a remote attacker to obtain sensitive database information by injecting SQL commands into the "cf name" parameter when...

8.8CVSS7.6AI score0.04962EPSS
SaveExploits4References1
CNVD
CNVD
added 2021/05/07 12:0 a.m.4 views

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34776)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/05/07 12:0 a.m.2 views

OURPHP suffers from SQL injection vulnerability (CNVD-2021-34781)

OURPHP is a PHP MySQL development based on the W3C standard building system. OURPHP has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/05/06 12:0 a.m.209 views

b2evolution 7-2-2 SQL Injection

Exploit Title: b2evolution 7-2-2 obtaining sensitive database information by injecting SQL commands into the "cfname" parameter Author: @nu11secur1ty Testing and Debugging: @nu11secur1ty Date: 05.06.2021 Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE:...

6.5CVSS8.8AI score0.04962EPSS
SaveExploits4
0day.today
0day.today
added 2021/05/06 12:0 a.m.83 views

b2evolution 7-2-2 - (cf_name) SQL Injection Exploit

Exploit Title: b2evolution 7-2-2 - 'cfname' SQL Injection Author: @nu11secur1ty Vendor: https://b2evolution.net/ Link: https://b2evolution.net/downloads/7-2-2 CVE: CVE-2021-28242 Proof: https://streamable.com/x51kso + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty CVE-2021-28242 from...

8.8CVSS8.8AI score0.04962EPSS
SaveExploits4
CNVD
CNVD
added 2021/05/06 12:0 a.m.1 views

SQL Injection Vulnerability in Cross-border E-commerce Order System of Hualei Information Technology Co.

Founded in 2013, Hualei Information Technology Co., Ltd. is a professional information technology service provider. A SQL injection vulnerability exists in the cross-border e-commerce order system of Hualei Information Technology Co. An attacker can exploit the vulnerability to obtain sensitive...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2021/05/05 12:0 a.m.3 views

CmsEasy suffers from SQL injection vulnerability (CNVD-2021-35527)

CmsEasy is a web content management system based on PHP Mysql architecture and a PHP development platform. CmsEasy is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/04/27 12:0 a.m.5 views

Extreme CMS suffers from SQL injection vulnerability (CNVD-2021-34285)

Extreme CMS is developed by Langfang Extreme Networks Technology Co., Ltd. using php an open source web content management system. Extreme CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2021/04/26 12:0 a.m.3 views

SQL Injection Vulnerability in NGFW of Next Generation Firewall of Beijing Netcom Technology Co.

Ltd. is a leading provider of network application management equipment in China, focusing on the research and analysis of the most cutting-edge trends in the field of network application management, providing users with advanced network application management technology, products and solutions,...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/04/25 12:0 a.m.4 views

Cynthia has a SQL injection vulnerability

Cynthia is an issue management / bug management / task management / project management system. Cynthia suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2021/04/19 12:0 a.m.5 views

Kingtrans Logistics Management System suffers from SQL Injection Vulnerability

Ltd. is a company mainly engaged in the technical development and sales of computer software and hardware; network technology development excluding Internet access services; computer system integration, technology development in the field of information technology, technology consulting and other...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2021/04/19 12:0 a.m.2 views

SQL Injection Vulnerability in rpcms Backend

rpcms a lightweight php content management system , can be a blog system , enterprise website system , information system . It is small , lightweight , but feature-rich , scalable . rpcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database...

7.5AI score
SaveExploits0
OpenVAS
OpenVAS
added 2021/04/19 12:0 a.m.20 views

b2evolution < 7.2.3 SQL Injection Vulnerability

b2evolution is prone to an SQL injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

8.8CVSS9.2AI score0.04962EPSS
SaveExploits4References2
NVD
NVD
added 2021/04/15 2:15 p.m.24 views

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

4.9CVSS0.01327EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/15 2:15 p.m.21 views

Sql injection

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

4CVSS5.5AI score0.01327EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/04/15 2:15 p.m.23 views

Sql injection

SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cfname" parameter when creating a new filter under the "Collections" tab...

6.5CVSS8.8AI score0.04962EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
added 2021/04/15 1:51 p.m.33 views

CVE-2021-27672

SQL Injection in the "adminboxes.ajax.php" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the "cID" parameter when creating a new HTML component...

5.9AI score0.01327EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/15 12:15 p.m.21 views

Sql injection

SQL Injection in the "add-services.php" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the "sername" parameter...

4CVSS6.8AI score0.01964EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2021/04/14 12:0 a.m.101 views

WordPress plugin SQL injection vulnerability (CNVD-2021-34528)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Quiz And Survey Master â€" Best Quiz, Exam and Survey...

8.8CVSS7.5AI score0.01893EPSS
SaveExploits2References1
Rows per page
Query Builder