Lucene search
+L

7223 matches found

CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•24 views

Complete Online Job Search System SQL Injection Vulnerability

Complete Online Job Search System is an online job search system. complete Online Job Search System is vulnerable to SQL injection, which originates from eris/admin/vacancy/index.php?view=edit & id=page missing validation of external input SQL statements. An attacker could use this vulnerability ...

7.2CVSS6AI score0.01011EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•23 views

Online Fire Reporting System SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=reports& date=Lack of validation of external input SQL statements, an...

7.2CVSS6AI score0.04914EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•21 views

Complete Online Job Search System SQL Injection Vulnerability

Complete Online Job Search System is an online job search system. SQL injection vulnerability exists in Complete Online Job Search System, which originates from /eris/admin/company/index.php?view=edit&id=page missing validation of external input SQL statements. An attacker could use this...

7.2CVSS6.1AI score0.04563EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•19 views

Wedding Management System SQL Injection Vulnerability

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/admin/ select.php page lacks validation of externally entered SQL statements,...

7.2CVSS6AI score0.0101EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•26 views

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel SQL Injection Vulnerability

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel is a user registration and login system with an administrative panel from EGavilan Media. EGavilan Media User-Registration -and-Login-System-With-Admin-Panel version 1.0 contains a SQL injection vulnerability, which stems from...

9.8CVSS5.9AI score0.01304EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•22 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. hospital Management System v1.0 is vulnerable to a SQL injection vulnerability that stems from a SQL injection issue. A remote attacker...

9.8CVSS6AI score0.02208EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•14 views

Simple Inventory System SQL Injection Vulnerability

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection attacks via /inventory/login.php...

7.2CVSS5.8AI score0.01032EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•21 views

Online Ordering System SQL Injection Vulnerability

Online Ordering System is a multi-store ordering system that can be used by any small business. statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

9.8CVSS5.9AI score0.0114EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/02 12:00 a.m.•19 views

Rescue Dispatch Management System SQL Injection Vulnerability

Rescue Dispatch Management System is a rescue dispatch management system developed by Carlo Montero. v1.0 of Rescue Dispatch Management System is vulnerable to SQL injection, which originates from /rdms/admin/ incidents/viewincident.php?id=The page lacks validation for external input SQL...

9.8CVSS5.9AI score0.01155EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•21 views

PT-2022-9782 · Maxboard · Maxboard

Name of the Vulnerable Software and Affected Versions: Maxboard affected versions not specified Description: The issue allows for SQL injection and file upload attacks due to insufficient validation of input values in some parameters and variables of files, which may lead to arbitrary code...

9.8CVSS10AI score0.01373EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/06/01 12:00 a.m.•21 views

DHIS 2 SQL injection vulnerability

DHIS2 is an information system for data capture, management, validation, analysis, and visualization. DHIS2 is vulnerable to SQL injection, which can be exploited by attackers to read, edit, and delete data in the DHIS2 instance database...

8.8CVSS5.8AI score0.01164EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/05/30 12:00 a.m.•12 views

OpenLDAP SQL Injection

The vulnerability of the OpenLDAP protocol lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a specially crafted query...

10CVSS8.1AI score0.64487EPSS
SaveExploits1References15Affected Software11
attackerkb
attackerkb
•added 2022/05/26 4:15 p.m.•8 views

CVE-2022-30500

Jfinal cms 5.1.0 is vulnerable to SQL Injection...

9.8CVSS7.4AI score0.0108EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/05/26 2:15 p.m.•28 views

CVE-2022-29688

CSCMS Music Portal System v4.2 was discovered to contain a blind SQL injection vulnerability via the id parameter at /admin.php/singer/admin/singer/hy...

7.2CVSS5.8AI score0.00957EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/26 2:15 p.m.•10 views

CVE-2022-29662

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

7.2CVSS6AI score0.00847EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•25 views

74cms SQL injection vulnerability

74cms is an online recruitment system based on PHP and MySQL by China Xunyi Technology Company. A SQL injection vulnerability exists in 74cmsSE v3.5.1, which originates from the lack of validation of the keyword parameter in /home/jobfairol/resumelist for externally entered SQL statements. An...

7.5CVSS6.1AI score0.01059EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•22 views

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. CSCMS Music Portal System suffers from a SQL injection vulnerability that originates from the id parameter in /admin.php/user/leveldel that lacks validation of externally...

7.2CVSS6.1AI score0.00957EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/26 12:00 a.m.•22 views

CSCMS Music Portal System SQL Injection Vulnerability

CSCMS Music Portal System is a diversified content management system of China Chong Sheng Network Technology CSCMS Company. A SQL injection vulnerability exists in CSCMS Music Portal System, which can be exploited by attackers to execute illegal SQL commands...

7.2CVSS6AI score0.00957EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/25 12:15 p.m.•13 views

CVE-2022-28862

In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Through the injection of arbitrary SQL statements, a potential attacker can modify query syntax and perform unauthorized and unexpected operations against the remo...

9.8CVSS7.4AI score0.0106EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/05/25 12:00 a.m.•24 views

Terraboard SQL injection vulnerability

Terraboard is a web panel for visualizing and querying Terraform status. sql injection vulnerability exists in versions prior to Terraboard 2.2.0, which can be exploited by attackers to conduct SQL injection attacks...

9.6CVSS5.9AI score0.0676EPSS
SaveExploits1References3
Rows per page
Query Builder