Lucene search
K

6204 matches found

CNVD
CNVD
added 2019/12/13 12:0 a.m.2 views

SQL injection vulnerability in oceancms backend ad***_pa***.php file

Ocean CMS is a video-on-demand system. Ocean cms background adpa.php file SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/12/13 12:0 a.m.1 views

Intesync Solismed SQL Injection Vulnerability

Intesync Solismed is a clinic management system designed for use by independent and free clinics. Intesync Solismed suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS8.2AI score0.00375EPSS
Exploits1References1
CNVD
CNVD
added 2019/12/12 12:0 a.m.1 views

SQL Injection Vulnerability in Bibliographic Data Retrieval System of Beijing Jinpan Software Technology Co.

Beijing Jinpan Software Technology Co., Ltd. bibliographic data retrieval system is the use of computer terminals to query the library collection of data resources of a modern search method. There is a SQL injection vulnerability in the Bibliographic Data Retrieval System of Beijing Jinpan Softwa...

7.7AI score
Exploits0
Positive Technologies
Positive Technologies
added 2019/12/12 12:0 a.m.2 views

PT-2019-15940 · Octeth · Octeth Oempro

Name of the Vulnerable Software and Affected Versions: Octeth Oempro versions 4.7 through 4.8 Description: The issue allows SQL injection. The parameter CampaignID in the Campaign.Get endpoint is vulnerable. Recommendations: For versions 4.7 and 4.8, avoid using the CampaignID parameter in the...

9.8CVSS9.6AI score0.00783EPSS
Exploits5References6
CNVD
CNVD
added 2019/12/12 12:0 a.m.1 views

SQL Injection Vulnerability in the Report Query System of Health Management Center

Health Management Center report query system is free free open source , it is based on unix as a prototype transformation of a multi-user multi-tasking operating system . The Health Management Center Report Query System suffers from a SQL injection vulnerability that can be exploited by an attack...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/12/12 12:0 a.m.1 views

CloudLock win_3.1.18.12 public cloud version suffers from sql injection bypass vulnerability

CloudLock is a free server security management software based on operating system kernel hardening technology, which supports cross-platform real-time, batch and remote security management of windows/linux servers. CloudLock Win3.1.18.12 public cloud version suffers from a sql injection bypass...

7.3AI score
Exploits0
CNVD
CNVD
added 2019/12/12 12:0 a.m.1 views

ZOHO ManageEngine Applications Manager SQL Injection Vulnerability (CNVD-2020-12713)

ZOHO ManageEngine Applications Manager is a set of IT operation and maintenance management solutions of the United States ZhuoHao ZOHO company. The product has application performance management, fault management, report generation and SLA management and other functions. A SQL injection...

8.8CVSS8.3AI score0.0705EPSS
Exploits0References1
OSV
OSV
added 2019/12/11 6:16 p.m.1 views

CVE-2019-19649

Zoho ManageEngine Applications Manager before 13620 allows a remote unauthenticated SQL injection via the SyncEventServlet eventid parameter to the SyncEventServlet.java doGet function...

9.8CVSS7.4AI score0.50395EPSS
Exploits0References2
CNVD
CNVD
added 2019/12/11 12:0 a.m.1 views

Daqing JiuJiu Network Technology Co., Ltd. website building system has SQL injection vulnerability

Daqing JiuJiu Network Technology Co., Ltd. is a technical service enterprise in the whole network marketing, enterprise e-commerce, value-added telecommunication business; network technology services; computer software development, sales and services, computer system services, computer repair, da...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/12/11 12:0 a.m.1 views

SQL Injection Vulnerability in Jinhua Flying Fox Network System

Jinhua Flying Fox Network Technology Co., Ltd. for a set of domain name registration, web hosting, enterprise post office, website construction, network promotion as one of the comprehensive technology enterprises. Jinhua Flying Fox Network website builder system has a SQL injection vulnerability...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/12/09 12:0 a.m.1 views

Web Security Dog (Apache Edition) V4.0 suffers from sql injection bypass vulnerability

Website Security Dog is a server tool that integrates website content security protection, website resource protection and website traffic protection functions. Functions covered by the net horse / Trojan scanning, anti-SQL injection, anti-stolen links, anti-CC attacks, real-time website traffic...

7.3AI score
Exploits0
CNVD
CNVD
added 2019/12/09 12:0 a.m.2 views

TI-Tool TITool PrintMonitor SQL Injection Vulnerability

TI-Tool TITool PrintMonitor is a printer management solution from TI-Tool Austria. A SQL injection vulnerability exists in TI-Tool TITool PrintMonitor. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit th...

9.8CVSS8.2AI score0.6882EPSS
Exploits1References1
CNVD
CNVD
added 2019/12/09 12:0 a.m.1 views

74cms Frontend SQL Injection Vulnerability

Knight Talent System 74cms is a PHP + MYSQL based on the core development of a set of free + open source professional recruitment system. 74cms front-end SQL injection vulnerability , attackers can exploit the vulnerability to obtain database sensitive information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/12/05 12:0 a.m.1 views

SQL Injection Vulnerability in VANOC Enterprise Website Management System cm***_in***_mo***.asp Page

Vanno enterprise website management system is an asp + access for the development of asp enterprise website source code. VANOC enterprise website management system cminmo.asp page there is a SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/12/04 12:0 a.m.1 views

SQL Injection Vulnerability in Heilongjiang Zihai Technology Group Co.

IISI Technology Group Co., Ltd. to provide a full set of Internet solutions for enterprises as the main direction is a set of domain name registration, IDC services, website construction and operation, APP development, software system development and other Internet services as one of the group...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/12/04 12:0 a.m.2 views

Forma Learning Management System SQL Injection Vulnerability (CNVD-2019-44281)

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker can exploit the vulnerability with a specially crafted web request to disclose database user credentials and potentially access the...

8.8CVSS7.8AI score0.00507EPSS
Exploits1References1
CNVD
CNVD
added 2019/12/04 12:0 a.m.2 views

TitanHQ WebTitan SQL Injection Vulnerability

TitanHQ WebTitan is a web content filter from TitanHQ Ireland. A SQL injection vulnerability exists in some features of the administrative interface in versions of TitanHQ WebTitan prior to 5.18. An attacker could exploit this vulnerability to obtain sensitive information from the software's...

7.5CVSS7.5AI score0.0035EPSS
Exploits1References1
CNVD
CNVD
added 2019/12/03 12:0 a.m.2 views

Forma Learning Management System SQL Injection Vulnerability

Forma Learning Management System LMS is a learning management system LMS. A SQL injection vulnerability exists in the Forma Learning Management System. An attacker could exploit this vulnerability by sending a specially crafted web request to disclose database user credentials and access the...

8.8CVSS7.8AI score0.0049EPSS
Exploits1References1
CNVD
CNVD
added 2019/12/03 12:0 a.m.1 views

Xingtai Tenghe Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xingtai Tenghe Network Technology Co., Ltd. is a company that provides comprehensive Internet solutions. Xingtai Tenghe Network Technology Co., Ltd. has a SQL injection vulnerability in its website builder system, which can be exploited by attackers to obtain sensitive server information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/12/02 12:0 a.m.1 views

SQL Injection Vulnerability in Ridewind Multi-User PHP Statistics System

Ride the Wind Multi-User PHP Statistics System is a website traffic statistics system for web store statistics. Ridewind Multi-User PHP Statistics System suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
Rows per page
Query Builder