Lucene search
K

6201 matches found

CNVD
CNVD
added 2018/11/16 12:0 a.m.1 views

SQL Injection Vulnerability in the Website Building System of Shanghai Qiu Chuang Technology Co.

Ltd. is a professional company focusing on providing customers with high-end website planning, website construction, web design, brand network marketing and related Internet-based application services. A SQL injection vulnerability exists in the website building system of Shanghai Seek Creative...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/11/14 12:0 a.m.1 views

Microsoft Dynamics 365 Remote Code Execution Vulnerability

Dynamics 365 is a product family of enterprise resource planning and customer relationship management applications released in July 2016 by Microsoft. A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8. The vulnerability stems from the Dynamics server...

8.8CVSS9AI score0.16516EPSS
Exploits0References1
Gitee
Gitee
added 2018/11/13 10:27 a.m.4 views

vulhub

It is an offensive tool for Web Application. The repository contains a collection of pre-built vulnerable docker environments, including a web application vulnerable to various attacks. The tool is designed to help developers and security researchers test and demonstrate the effectiveness of web...

7AI score
Exploits0
CNVD
CNVD
added 2018/11/13 12:0 a.m.1 views

MetInfo pa***.php file has sql injection vulnerability

MetInfo is a content management system developed using PHP and Mysql. A sql injection vulnerability exists in the MetInfo pa.php file, which can be exploited by an attacker to obtain sensitive information from the database...

7.2AI score
Exploits0
CNVD
CNVD
added 2018/11/12 12:0 a.m.1 views

SQL Injection Vulnerability in QuarkCall All-Media Call Center Platform of Beijing Topmin Information Technology Co.

QuarkCall all-media call center integrates Topmind call center and unified communications products and services, aiming to help enterprises optimize customer experience, improve satisfaction and loyalty; optimize workflow and improve work efficiency. There is a SQL injection vulnerability in the...

7.7AI score
Exploits0
CNVD
CNVD
added 2018/11/10 12:0 a.m.1 views

Free version of TouchNet Universal Mall website builder system suffers from SQL injection vulnerability

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. The free version of TouchNet Universal Mall Station Building System has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/11/08 12:0 a.m.2 views

Cisco Integrated Management Controller Supervisor SQL Injection Vulnerability

Cisco Integrated Management Controller IMC Supervisor is a set of tools used by Cisco to manage UCS Unified Computing System, which supports HTTP, SSH access, etc., and allows operations such as powering up, shutting down, and restarting the server. A SQL injection vulnerability exists in the web...

9.8CVSS8.7AI score0.00658EPSS
Exploits0References1
CNVD
CNVD
added 2018/11/08 12:0 a.m.1 views

SQL Injection Vulnerability in HDCMS v2.0 groupLists Function

HDCMS is a content management system software package developed in PHP+Mysql. It provides customers with powerful and complete functionality to accomplish rapid website development. HDCMS v2.0 version groupLists function has a SQL injection vulnerability, remote attackers can use this vulnerabili...

7.9AI score
Exploits0
CNVD
CNVD
added 2018/11/07 12:0 a.m.1 views

SQL Injection Vulnerability in Nanjing Yunhuatong Network Technology Website Building System

Nanjing Yunhuatong Network Technology Station Building System is an enterprise station building system developed by Nanjing Yunhuatong Network Technology Co. There is a SQL injection vulnerability in Nanjing Yunhuatong Network Technology website building system, which can be exploited by attacker...

7.6AI score
Exploits0
OSV
OSV
added 2018/10/29 12:29 p.m.2 views

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

9.8CVSS5.8AI score0.0025EPSS
Exploits1References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.2 views

zzcms SQL Injection Vulnerability (CNVD-2018-26020)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the admin/tagmanage.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of the...

7.2CVSS7.4AI score0.00247EPSS
Exploits1References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.2 views

zzcms SQL Injection Vulnerability (CNVD-2018-26016)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zt/top.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql...

9.8CVSS9.8AI score0.0025EPSS
Exploits1References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.1 views

Joomla Component Responsive eXtro jQuery Gallery 'filter_category' parameter SQL injection vulnerability

eXtro Responsive Gallery creates fully responsive galleries based on images stored in the server catalog. The module also creates optimized preview images based on settings. A SQL injection vulnerability exists in the 'filtercategory' parameter in Joomla Component Responsive eXtro jQuery Gallery...

7.6AI score
Exploits0References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.1 views

zzcms SQL Injection Vulnerability (CNVD-2018-26019)

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs/zslist.php file in ZZCMS version 8.3. A remote attacker can exploit this vulnerability to obtain the current user name of mysql with the help of pxzs cookie...

9.8CVSS9.8AI score0.0025EPSS
Exploits1References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.1 views

Quick Count 'txtInstID' Parameter SQL Injection Vulnerability

Quickcount is a way to measure audience response on your own web host without having to prepare special slides or other settings. A SQL injection vulnerability exists in the 'txtInstID' parameter of Quick Count version 2.0, which can be exploited by an attacker to gain access to sensitive databas...

8.1AI score
Exploits0References1
CNVD
CNVD
added 2018/10/29 12:0 a.m.2 views

S-CMS Enterprise Website Builder System suffers from SQL Injection Vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in S-CMS. Attackers can use the vulnerability to obtain sensitive information in the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2018/10/25 12:0 a.m.1 views

S-CMS News Portal System me***.php page suffers from SQL injection vulnerability

S-CMS news portal system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station. A SQL injection vulnerability exists in the me.php page of the S-CMS news portal system. An attacker can exploit the vulnerability to obtain sensitive...

7.6AI score
Exploits0
CNVD
CNVD
added 2018/10/24 12:0 a.m.2 views

s-cms SQL Injection Vulnerability

s-cms is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in s-cms 3.0. A remote attacker can exploit the vulnerability by providing the '0id' parameter to the member/post.php file or POST data to the member/memberlogin.php file to log into the system...

9.8CVSS9.9AI score0.00398EPSS
Exploits1References1
CNVD
CNVD
added 2018/10/24 12:0 a.m.1 views

SQL Injection Vulnerability in Laoban CMS

Laoban CMS content management system referred to as: Laoban CMS is developed by Laoban based on PHP + MYSQL environment of the open source station-building system. Laoban CMS suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2018/10/24 12:0 a.m.2 views

Citrix SD-WAN and NetScaler SD-WAN SQL Injection Vulnerabilities

Citrix SD-WAN and NetScaler SD-WAN are both software-defined WAN solutions from Citrix Systems USA. The products support real-time path selection, edge routing, stateful firewalls, end-to-end Qos and WANs. A SQL injection vulnerability exists in Citrix SD-WAN and NetScaler SD-WAN, which can be...

9.8CVSS10AI score0.00478EPSS
Exploits0References1
Rows per page
Query Builder