Lucene search
+L

6980 matches found

CNNVD
CNNVD
added 2023/09/14 12:00 a.m.10 views

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v.3.6, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a carefully crafted...

9.8CVSS7.8AI score0.01409EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.7 views

Movus SQL Injection Vulnerability

Movus is a rental car service by Movus, Inc. A SQL injection vulnerability exists in versions prior to Movus 20230913, which stems from the presence of a SQL injection vulnerability...

9.8CVSS7.8AI score0.0055EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/09/14 12:00 a.m.11 views

Vtiger CRM SQL Injection Vulnerability

Vtiger CRM is a set of customer relationship management system CRM based on SugarCRM developed by American Vtiger. The management system provides functions such as managing, collecting, and analyzing customer information. A security vulnerability exists in Vtiger CRM version v.7.5.0, which...

8.8CVSS7AI score0.00946EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/09/14 12:00 a.m.11 views

PT-2023-30173

Name of the Vulnerable Software and Affected Versions Sanalogy Turasistan versions prior to 20230911 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. There is no...

9.8CVSS7.4AI score0.00559EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/09/13 12:00 a.m.17 views

The vulnerability of the ajax_hosts() and ajax_hosts_noany() functions (graphs.php) of the Cacti network monitoring tool allows a hacker to execute arbitrary SQL queries.

The vulnerability of the ajaxhosts and ajaxhostsnoany functions graphs.php of the Cacti network monitoring tool is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using a specially...

9CVSS8.2AI score0.01689EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2023/09/12 12:00 a.m.11 views

BlackBerry AtHoc SQL Injection Vulnerability

BlackBerry AtHoc is a crisis communications solution for federal, state and local governments, public safety and law enforcement agencies, and schools from BlackBerry Canada. A security vulnerability exists in BlackBerry AtHoc version 7.15, which stems from a SQL injection vulnerability in the...

7.2CVSS7.8AI score0.0049EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/09/11 12:00 a.m.8 views

The vulnerability of the Google Maps API Super Store Finder software lies in its lack of protection against SQL query structures, allowing attackers to gain access to the administration panel.

The vulnerability of the Google Maps API Super Store Finder integration tool is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to the administration panel...

10CVSS7.8AI score0.00784EPSS
SaveExploits2References3Affected Software1
CNNVD
CNNVD
added 2023/09/10 12:00 a.m.9 views

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform Operating System Command Injection Vulnerability

Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform is a Multi-Service Secure Gateway Intelligent Management Platform from Beijing Baichuo, China. The Beijing Baichuo Smart S45F Multi-Service Secure Gateway Intelligent Management Platform suffers from an...

9.8CVSS7.8AI score0.74897EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2023/09/09 7:37 a.m.15 views

Exploit for SQL Injection in Simple_Online_Piggery_Management_System_Project Simple_Online_Piggery_Management_System

Online Piggery Farm Management Syst...

9.8CVSS7.4AI score0.23311EPSS
SaveExploits7
CNNVD
CNNVD
added 2023/09/07 12:00 a.m.11 views

Internet Reservation Module Booking Engine Code Issue Vulnerability

Internet Reservation Module Booking Engine is a booking platform. A code issue vulnerability exists in Internet Reservation Module Booking Engine. An attacker could use this vulnerability to upload arbitrary content, such as a web shell component, to a SQL database and execute it with system...

9.9CVSS7.9AI score0.00737EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/09/05 8:15 p.m.5 views

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

9.8CVSS5.7AI score0.00744EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/05 7:15 p.m.9 views

CVE-2023-4531

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mestav Software E-commerce Software allows SQL Injection.This issue affects E-commerce Software: before 20230901...

9.8CVSS5.8AI score0.00523EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/09/05 6:15 p.m.6 views

CVE-2023-35068

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BMA Personnel Tracking System allows SQL Injection. This issue affects Personnel Tracking System: before 20230904...

9.8CVSS7.4AI score0.00519EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/09/05 12:00 a.m.9 views

PT-2023-25129 · Unknown · Coyav Travel Proagent

Name of the Vulnerable Software and Affected Versions: Coyav Travel Proagent versions before 20230904 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS9.5AI score0.00519EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/09/05 12:00 a.m.11 views

Mestav Software E-commerce Software SQL Injection Vulnerability

Mestav Software E-commerce Software is an e-commerce software from Mestav Software, Turkey. An SQL injection vulnerability exists in Mestav Software E-commerce Software versions prior to 20230901, which stems from susceptibility to SQL injection attacks...

9.8CVSS7.9AI score0.00523EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/09/05 12:00 a.m.10 views

The vulnerability of the Quick Post Duplicator plugin of the WordPress content management system allows a hacker to gain unauthorized access to protected information and execute arbitrary SQL code.

The vulnerability of the Quick Post Duplicator plugin of the WordPress content management system is related to the lack of protection for the SQL query structure when processing the postid parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

9CVSS8.2AI score0.00733EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/05 12:00 a.m.11 views

Cacti SQL Injection Vulnerability

Cacti is a set of open source network traffic monitoring and analysis tools from the Cacti team. The tool obtains data via snmpget, analyzes it using RRDtool drawing graphs, and provides data and user management features. Cacti suffers from an SQL injection vulnerability that stems from regular...

6.3CVSS7.8AI score0.00857EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2023/09/05 12:00 a.m.9 views

PT-2023-25121

Name of the Vulnerable Software and Affected Versions Osoft Paint Production Management versions prior to 2.1 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS7.4AI score0.00519EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2023/09/04 12:00 a.m.12 views

The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in its failure to protect the SQL query structure. This allows attackers to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and gain unauthorized access to protected...

7.5CVSS8AI score0.00516EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2023/09/02 12:00 a.m.10 views

MOXA MXsecurity SQL Injection Vulnerability

MOXA MXsecurity is a management platform from China-based MOXA. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MXsecurity v1.0.1...

8.1CVSS6.9AI score0.00516EPSS
SaveExploits0References2
Rows per page
Query Builder