5987 matches found
Simmeth System Supplier Manager SQL注入漏洞
Simmeth System Supplier Manager is a supply chain software from Simmeth System, Germany. versions prior to Simmeth System Supplier Manager 5.6 contain a design error vulnerability that could be exploited by attackers to obtain sensitive database information...
CVE-2022-43288
Rukovoditel v3.2.1 was discovered to contain a SQL injection vulnerability via the orderby parameter at /rukovoditel/index.php?module=logs/view&type=php...
Arches SQL注入漏洞
Arches is an Arches open source web platform for creating, managing and visualizing geospatial data. A security vulnerability exists in Arches versions prior to 6.1.2, 6.2.1, and 7.1.2, which stems from an attacker being able to implement SQL injection via a crafted web request...
Delta Electronics DIAEnergie SQL注入漏洞
Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics Taiwan, China used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes and maximize...
CVE-2022-39069
There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...
Schneider Electric EcoStruxure Operator Terminal Expert SQL注入漏洞
Schneider Electric EcoStruxure Operator Terminal Expert is a touch screen configuration software from Schneider Electric, France. This software support is mainly used to create and edit touch applications. A SQL injection vulnerability exists in Schneider Electric EcoStruxure Operator Terminal...
UBUNTU-CVE-2022-39323
GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Time based attack using a SQL injection in api REST usertoken. This issue has been patched, please...
Online Diagnostic Lab Management System SQL注入漏洞
Online Diagnostic Lab Management System is an online diagnostic lab management system. v1.0 of Online Diagnostic Lab Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements and can be exploited by attackers to to obtain sensitiv...
seccome Ehoney 安全漏洞
seccome Ehoney is a secure, fast, highly interactive, enterprise-class honeypot management system open-sourced by China seccome. seccome Ehoney has a security vulnerability , the vulnerability stems from its file /api/v1/attack/token in the unknown function of the parameter Payload operation lead...
Johnson Controls CKS CEVAS 跨站脚本漏洞
Johnson Controls CKS CEVAS is a web-based billing and reporting solution from Johnson Controls, Inc. It is used for rescue and emergency services. A security vulnerability exists in Johnson Controls CKS CEVAS versions prior to 1.01.46. An attacker exploited the vulnerability to retrieve data via ...
PT-2022-24929 · Metabase · Metabase
Name of the Vulnerable Software and Affected Versions: Metabase versions prior to 0.41.9, 0.42.6, 0.43.7, 0.44.5, 1.41.9, 1.42.6, 1.43.7, and 1.44.5 Description: The issue allows Remote Code Execution RCE in Metabase, a data visualization software, when users can write SQL queries on H2 databases...
Metabase 安全漏洞
Metabase is an open source data analytics platform from Metabase, Inc. in the United States. A security vulnerability exists in Metabase that stems from the fact that H2 the example database can allow Remote Code Execution RCE, which can be abused by users who are able to write SQL queries on the...
Delta Electronics DIAEnergie SQL注入漏洞
Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. A securi...
PT-2022-22961 · Sourcecodester · Sourcecodester Cashier Queuing System
Name of the Vulnerable Software and Affected Versions: SourceCodester Cashier Queuing System version 1.0 Description: A critical issue was found in the Login Page component, specifically in the /queuing/login.php file. The manipulation of the username and password arguments leads to SQL injection...
Changing Information Technology RAVA certificate validation system SQL注入漏洞
Changing Information Technology RAVA certificate validation system Panorama Software RAVA certificate validation system website is a credential validation system from China-based Changing Information Technology. The Panorama Software RAVA certificate validation system suffers from a SQL injection...
Open Source SACCO Management System SQL注入漏洞
Open Source SACCO Management System is an open source SACCO management system by Mayuri K. Individual developer. A security vulnerability exists in Open Source SACCO Management System v1.0, which can be exploited by an attacker to perform SQL injection via its /saccoshield/managepayment.php...
Purchase Order Management System SQL注入漏洞
Purchase Order Management System is a purchase order management system by Carlo Montero, an individual developer. A security vulnerability exists in Purchase Order Management System version 1.0, which is caused by a sql injection due to manipulation of the parameter id...
Simple Online Public Access Catalog SQL注入漏洞
Simple Online Public Access Catalog OPAC is a web-based application by Carlo Montero Personal Developer. It is used to manage library materials or book databases for a particular school or university. A SQL injection vulnerability exists in Simple Online Public Access Catalog version 1.0, which...
Human Resource Management System 安全漏洞
Human Resource Management System is a human resource management system by maverickosama Personal Developer. A security vulnerability exists in Human Resource Management System, which stems from an unknown function in its city.php component that operates on the parameter searccity to cause SQL...