Lucene search
K

6204 matches found

CNVD
CNVD
added 2019/10/14 12:0 a.m.1 views

SQL injection vulnerability in c**l.asp page of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/13 12:0 a.m.1 views

SQL injection vulnerability in seacms backend ad***_co***.php page (CNVD-2019-41065)

seacms ocean movie management system, ocean cms is a video-on-demand system based on PHP + MySql technology. There is a SQL injection vulnerability in the adco.php page in the background of seacms. Attackers can use the vulnerability to obtain sensitive information in the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/10/10 12:0 a.m.1 views

Cisco Firepower Management Center SQL Injection Vulnerability (CNVD-2019-34733)

Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. A SQL injection vulnerability exists in the web-based management interface in Cisco FMC, which stems from the program's failure to properly validate input. A remote attacker could exploit...

9CVSS8AI score0.00897EPSS
Exploits0References1
CNVD
CNVD
added 2019/10/10 12:0 a.m.1 views

SQL injection vulnerability in c**e.asp of Chengdu Firefox Technology Co.

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion, development of new technology areas of the network, mainly dedicated to the enterprise information technology services of the professional network companies, is based on the Internet to provide a comprehensive e-commerce...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/08 12:0 a.m.1 views

SQL injection vulnerability in the frontend of Queue Evaluation Integrated Management System V5.3 (CNVD-2019-41011)

Queuing evaluation integrated management system V5.3, make full use of the queuing time for self-service filling operations, fill out a single queue but not the number, lifting the customer to fill out a single worry. SQL injection vulnerability exists in the frontend of Queue Evaluation Integrat...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/10/08 12:0 a.m.1 views

Chengdu Firefox Technology Co., Ltd. website builder system suffers from SQL injection vulnerabilities

Chengdu Firefox Technology Co., Ltd. is a set of research, promotion and development of new technology areas of the network, mainly dedicated to the enterprise information technology services of professional network companies, with a number of Internet-related products and services. Chengdu Firef...

7.5AI score
Exploits0
Snyk
Snyk
added 2019/10/07 12:51 p.m.2 views

SQL Injection

Overview knex is a query builder for PostgreSQL, MySQL and SQLite3 Affected versions of this package are vulnerable to SQL Injection. None Remediation Upgrade knex to version 0.19.5 or higher. References - GitHub Commit - GitHub PR Credit: Snyk Security Research Team...

9.8CVSS7.3AI score0.00281EPSS
Exploits1References2
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

S-CMS php version enterprise website builder system v3.0 SQL injection vulnerability in background aj***2 parameter

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj2 parameters exist SQL injection vulnerability,...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

SQL Injection Vulnerability in Student Assessment System of Citycom Technology

Shandong Chengtong Technology Co., Ltd. is a company mainly engaged in the development and sale of computer software and hardware; computer system integration services and other projects. There is a SQL injection vulnerability in the Student Literacy Assessment System of Chengtong Technology, whi...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/10/06 12:0 a.m.1 views

S-CMS php version enterprise website building system v3.0 SQL injection vulnerability in background aj*** N*** parameters (CNVD-2019-40101)

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj N parameter there is a SQL injection vulnerability, t...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/30 12:0 a.m.1 views

SQL injection vulnerability in the co***.cl***.php file of the Seven Bears library system

Seven bears library system a similar Baidu library online document preview, selling system. A SQL injection vulnerability exists in the co.cl.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/29 12:0 a.m.3 views

eBrigade SQL Injection Vulnerability (CNVD-2019-35770)

eBrigade is a rescue team management system. The system includes personnel management, vehicle management and equipment management. A SQL injection vulnerability exists in eBrigade versions prior to 5.0, which can be exploited by attackers to execute illegal SQL commands...

8.8CVSS8.2AI score0.003EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/26 12:0 a.m.2 views

Yantai Cloud Pulse Network CMS website building system has SQL injection vulnerability

Yantai Cloud Pulse Network Technology Co., Ltd. is a professional website construction and search engine marketing services provider. Dedicated to small and medium-sized enterprises network marketing services, and website construction, enterprise version of the PC website construction, three-in-o...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/09/26 12:0 a.m.1 views

SQL Injection Vulnerability in Kaixin Quote System V2.0

Qixing Quotation System V2.0 is a general management system developed for material quotations. The Qixing Quotation System V2.0 suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/26 12:0 a.m.1 views

SQL Injection Vulnerability in the Basic Website of Shenzhen Tiandixin Network Technology Co.

Founded in 2010, Tiandixin Network is an enterprise mainly focusing on corporate website construction, Baidu home page natural ranking, domain name registration, space rental, enterprise post office, 400 telephone, corporate VI design, electronic album production and other services. The basic...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/09/26 12:0 a.m.1 views

ShopsN open source mall system Go***::cl*** file with SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system Go::cl file SQL injection vulnerability ,...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/09/26 12:0 a.m.1 views

ShopsN open source mall system In***::go*** file with SQL injection vulnerabilities

ShopsN open source mall system is a product of Shanghai Yiso Network Technology Co., Ltd. an enterprise-class commercial standard full-featured allow free commercial use of open source online store full network system . ShopsN open source mall system In::go file there is a SQL injection...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/09/25 12:0 a.m.1 views

SQL Injection Vulnerability in VANOC Enterprise Website Management System c****r.php Page

Fanno enterprise website management system is a website construction system developed by Cangzhou City Fanno Advertising Media Co. Vanno enterprise website management system cr.php page SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

7.8AI score
Exploits0
OSV
OSV
added 2019/09/24 3:15 p.m.1 views

CVE-2019-16383

MOVEit.DMZ.WebApi.dll in Progress MOVEit Transfer 2018 SP2 before 10.2.4, 2019 before 11.0.2, and 2019.1 before 11.1.1 allows an unauthenticated attacker to gain unauthorized access to the database. Depending on the database engine being used MySQL, Microsoft SQL Server, or Azure SQL, an attacker...

9.4CVSS7.3AI score
Exploits0References5
CNVD
CNVD
added 2019/09/23 12:0 a.m.1 views

SQL injection vulnerability in zzcms 2019 frontend (CNVD-2019-37717)

zzcms webmaster Merchants content management system, developed by the zzcms team, into the database optimization, content caching, AJAX and other technologies, so that the site's security, stability, load capacity to get a reliable protection. Open source, independent functional modules, to...

7.8AI score
Exploits0
Rows per page
Query Builder