Lucene search
K

6204 matches found

CNVD
CNVD
added 2019/09/23 12:0 a.m.1 views

SQL Injection Vulnerability in the Website Building System **fo.asp Page of Anshan China Domain Network Technology Co.

Ltd. is a high-tech network company that specializes in website building and website construction. Ltd. website building system fo.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information such as database...

7.5AI score
Exploits0
CNVD
CNVD
added 2019/09/21 12:0 a.m.1 views

S-CMS e-commerce system aj***.php page L_*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page L parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/09/17 12:0 a.m.1 views

WordPress Relevanssi Premium Plugin SQL Injection Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress Relevanssi Premium plugin versions prior to 1.14.6.1. The...

8.8CVSS8AI score0.00592EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/17 12:0 a.m.4 views

WordPress kama-clic-counter plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. kama-clic-counter is a plugin that uses the page download feature in it. A SQL injection vulnerability exists in version 3.4.9 of the...

9.3CVSS8AI score0.0089EPSS
Exploits2References1
OSV
OSV
added 2019/09/14 4:15 p.m.1 views

CVE-2019-16309

FlameCMS 3.3.5 has SQL injection in account/login.php via accountName...

9.8CVSS5.8AI score
Exploits0References1
CNVD
CNVD
added 2019/09/12 12:0 a.m.1 views

SQL Injection Vulnerability in the Frontend Web*** of Nanjing Benan's Hidden Trouble Detection and Management Information System for Work Safety Accidents v2.3

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. Nanjing Benan Safety Production Accident Hidden Trouble Detection and Management Information System v2.3 There exists a SQL injection...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/09/12 12:0 a.m.1 views

SQL Injection Vulnerability in the Front-end of Nanjing Benan's Hidden Trouble Investigation and Management Information System for Work Safety Accidents

Nanjing Benan Instrumentation Systems Co., Ltd. is committed to the design and development of hardware and software products in the field of safety production. SQL injection vulnerability exists in the front-end of Nanjing Benan's information system for investigating and managing hidden productio...

8AI score
Exploits0
CNVD
CNVD
added 2019/09/11 12:0 a.m.6 views

WordPress SlickQuiz SQL Injection Vulnerability

WordPress is a suite of blogging platforms developed in the PHP language by the WordPress Foundation.SlickQuiz is a plugin for displaying and managing nice dynamic quizzes. WordPress SlickQuiz suffers from a SQL injection vulnerability that can be exploited by attackers to execute illegal SQL...

8.8CVSS8.8AI score0.00464EPSS
Exploits3References1
CNVD
CNVD
added 2019/09/10 12:0 a.m.1 views

S-CM e-commerce system aj***.php page P_sort parameter SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CM e-commerce system aj.php page Psort parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/09/09 12:0 a.m.4 views

WordPress photo-gallery plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. photo-gallery is an image gallery plugin used in it. A SQL injection vulnerability exists in WordPress photo-gallery 10Web Photo Galle...

9.8CVSS8AI score0.34044EPSS
Exploits4References1
CNVD
CNVD
added 2019/09/06 12:0 a.m.1 views

SQL Injection Vulnerability in FlameCMS

FlameCMS lightweight modular front-end framework for developing fast, powerful web interfaces. FlameCMS suffers from a SQL injection vulnerability that can be exploited by attackers to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/09/05 12:0 a.m.1 views

S-CMS php version hospital website building system v1.0 SQL injection vulnerability in background aj***.php page (CNVD-2019-32865)

S-CMS php version hospital website building system is a PHP based website building system. S-CMS php version hospital website builder system v1.0 has a SQL injection vulnerability in the background aj.php page, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/09/05 12:0 a.m.1 views

Epignosis eFront LMS SQL Injection Vulnerability

Epignosis eFront LMS is a suite of online e-learning platforms from Epignosis, Inc. in the United States. The platform provides test building, assignment management, internal messaging, forums and online chat. A SQL injection vulnerability exists in Epignosis eFront LMS version 5.2.12 and earlier...

6.5CVSS8.1AI score0.00283EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

WordPress sharebar plugin SQL injection vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. sharebar is a plugin used to add social sharing buttons to blogs. A SQL injection vulnerability exists in the WordPress sharebar plugi...

9.8CVSS8AI score0.00546EPSS
Exploits0References1
CNVD
CNVD
added 2019/09/03 12:0 a.m.1 views

SQL Injection Vulnerability in the 'nrfl' Parameter of the APP Interface of Mobile Phone Letter (Mass Version)

Jiangsu Chuhuai Software Technology Development Co., Ltd. is a high-tech industry software company integrating software development, system integration and informationization construction. There is a SQL injection vulnerability in the Mobile Letter and Visit Mass Version APP, which can be exploit...

7.6AI score
Exploits0
CNVD
CNVD
added 2019/09/03 12:0 a.m.2 views

WordPress gigpress plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gigpress is used in one of the program listings to add and manage plug-ins. A SQL injection vulnerability exists in the WordPress...

7.2CVSS8.1AI score0.00539EPSS
Exploits4References1
CNVD
CNVD
added 2019/09/02 12:0 a.m.1 views

SQL Injection Vulnerability in PHPMyWind infol***_s***.php File

PHPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . A SQL injection vulnerability exists in the PHPMyWind infols.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/29 12:0 a.m.1 views

Prophecy International Snare Central SQL Injection Vulnerability

Prophecy International Snare Central is a suite of log collection and management tools from Prophecy International Australia. A SQL injection vulnerability exists in Prophecy International Snare Central versions prior to 7.4.5, which stems from a lack of validation of externally-entered SQL...

7.2CVSS8.2AI score0.00577EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/29 12:0 a.m.1 views

SQL injection vulnerability in the background aj***.php page of S-CMS government website builder system

S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the background aj.php page of the S-CMS Government Building System, which can be exploited by an attacker to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/29 12:0 a.m.2 views

WordPress rsvpmaker plugin SQL injection vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. rsvpmaker is used in one of the event scheduling and RSVP tracking plugin. A SQL injection vulnerability exists in WordPress...

9.8CVSS8AI score0.00652EPSS
Exploits0References1
Rows per page
Query Builder