Lucene search
+L

5987 matches found

CNNVD
CNNVD
added 2024/03/13 12:00 a.m.9 views

SourceCodester Best POS Management System SQL Injection Vulnerability

SourceCodester Best POS Management System is a POS management system from SourceCodester, Inc. A SQL injection vulnerability exists in SourceCodester Best POS Management System version 1.0, which stems from a parameter id in the file /vieworder.php that can lead to SQL injection...

9.8CVSS8AI score0.0073EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/12 5:15 p.m.7 views

CVE-2024-26164

Microsoft Django Backend for SQL Server Remote Code Execution Vulnerability...

8.8CVSS5.9AI score0.02106EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/12 3:15 p.m.5 views

CVE-2023-48788

A improper neutralization of special elements used in an sql command 'sql injection' in Fortinet FortiClientEMS version 7.2.0 through 7.2.2, FortiClientEMS 7.0.1 through 7.0.10 allows attacker to execute unauthorized code or commands via specially crafted packets...

9.8CVSS5.9AI score0.98446EPSS
SaveExploits4References2
CNNVD
CNNVD
added 2024/03/12 12:00 a.m.10 views

Microsoft OLE DB Provider for SQL Server Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft OLE DB Provider for SQL Server. An attacker could exploit the vulnerability to remotely execute code. T...

8.8CVSS7.2AI score0.01947EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/12 12:00 a.m.19 views

Fortinet FortiClientEMS SQL注入漏洞

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. A SQL injection vulnerability exists...

9.8CVSS8.2AI score0.98446EPSS
SaveExploits4References4
CNNVD
CNNVD
added 2024/03/12 12:00 a.m.10 views

Microsoft Django Backend for SQL Server Security Vulnerability

Microsoft Django Backend for SQL Server is a database backend for the Django web framework for connecting to and manipulating Microsoft SQL Server databases from Microsoft USA. A security vulnerability exists in Microsoft Django Backend for SQL Server. An attacker can exploit the vulnerability to...

8.8CVSS7.3AI score0.02106EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/11 6:15 p.m.9 views

CVE-2024-1068

The 404 Solution WordPress plugin before 2.35.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admins...

7.2CVSS5.8AI score0.00756EPSS
SaveExploits2References1
OSV
OSV
added 2024/03/08 2:15 a.m.11 views

CVE-2024-2283

A vulnerability classified as critical has been found in boyiddha Automated-Mess-Management-System 1.0. Affected is an unknown function of the file /member/view.php. The manipulation of the argument date leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00565EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/07 1:15 a.m.11 views

CVE-2023-49989

Hotel Booking Management v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at update.php...

9.8CVSS5.8AI score0.00784EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.13 views

Hotel Booking Management Security Breach

Hotel Booking Management is a database web application for hotel booking management by Pratham Personal Developer. A security vulnerability exists in Hotel Booking Management v1.0, which was discovered to contain an SQL injection vulnerability through the npss parameter in rooms.php...

7.5CVSS8.2AI score0.0068EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.7 views

Hospital Management System Security Vulnerability

The Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version 1.0 that stems from an SQL injection vulnerability contained...

2.7CVSS7.8AI score0.00443EPSS
SaveExploits0References2
OSV
OSV
added 2024/03/06 7:15 p.m.11 views

AZL-35763 CVE-2024-27289 affecting package telegraf for versions less than 1.29.4-4

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for a numeric value must be immediately preceded by a minus; there must be a second placeholder for ...

8.1CVSS6.7AI score0.00854EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/06 12:00 a.m.9 views

Lost and Found Information System SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system by oretnom23 individual developers. A SQL injection vulnerability exists in the Sourcecodester Lost and Found Information System version 1.0, which originates from the system's susceptibility to unauthenticated SQL injection...

7.5CVSS7.7AI score0.00408EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/03/06 12:00 a.m.11 views

The vulnerability of the MSSQL Database Storage Backend component in the platform for archiving corporate information, HashiCorp Vault and Vault Enterprise, allows a perpetrator to execute arbitrary SQL commands.

The vulnerability of the MSSQL Database Storage Backend component in the HashiCorp Vault and Vault Enterprise archiving platforms relates to the lack of security measures for SQL query structures. Exploiting this vulnerability allows attackers to execute arbitrary SQL commands...

6.7CVSS6.9AI score0.00378EPSS
SaveExploits0References6Affected Software3
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.5 views

CVE-2023-49968

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

7.3CVSS5.9AI score0.00456EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/05 12:15 a.m.10 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.8AI score0.0114EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/03/05 12:00 a.m.16 views

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8.5AI score0.01644EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/05 12:00 a.m.10 views

Baizhuo Network Smart s200 Management Platform Security Vulnerability

Baizhuo Network Smart s200 Management Platform is a network management platform from Baizhuo, China. A security vulnerability exists in Baizhuo Network Smart s200 Management Platform v.S200, which originates from a SQL injection vulnerability in the /importexport.php component...

7.8CVSS8AI score0.01101EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/04 12:00 a.m.12 views

Online Mobile Management Store SQL Injection Vulnerability

Online Mobile Management Store is an online mobile store management system. A SQL injection vulnerability exists in Online Mobile Management Store version 1.0, which originates from a SQL injection vulnerability in the parameter id of the file /admin/orders/vieworder.php...

9.8CVSS7.9AI score0.0066EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/04 12:00 a.m.11 views

PT-2024-22114 · Arista · Arista Ng Firewall

Name of the Vulnerable Software and Affected Versions: Arista NG Firewall affected versions not specified Description: The issue concerns multiple SQL Injection vulnerabilities in the reporting application of the Arista Edge Threat Management - Arista NG Firewall. These vulnerabilities can be...

8.8CVSS8.6AI score0.08794EPSS
SaveExploits0References6
Rows per page
Query Builder