Lucene search
+L

6885 matches found

CNVD
CNVD
added 2020/05/30 12:0 a.m.7 views

Wuhu ECCOM Information Technology Co., Ltd. website building system has SQL injection vulnerability

Wuhu eXpress Information Technology Co., Ltd. is an Internet application service solution provider. There is a SQL injection vulnerability in the website building system of Wuhu ECCOM Information Technology Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/29 12:0 a.m.6 views

SQL Injection Vulnerability in National Digital Learning Resource Center Website Building System

The National Center for Digital Learning Resources NCDLR is a business unit engaged in the research, development, promotion and service of digital learning resources and education informatization software. A SQL injection vulnerability exists in the National Digital Learning Resource Center's...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/28 12:0 a.m.4 views

SQL injection vulnerability in PIMS online order management system re***.php file

PIMS online order management system for single-page ordering sites, general product ordering sites and other ordering sites, designed to facilitate the full background management through the fast integration of Alipay, Paypal, eBao, netbank online, PayPal and other payment interfaces, management ...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/27 12:0 a.m.3 views

SQL Injection Vulnerability in Sancai Journal Acquisition System (CNVD-2020-38472)

Sancai Journal Acquisition and Editing System is a networked office platform. SQL injection vulnerability exists in Sancai Journal Editorial System. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/05/27 12:0 a.m.5 views

Command execution vulnerability in SongCMS PHP version (CNVD-2020-38508)

SongCMS PHP Edition is an open source CMS based on PHP+MySQL. SongCMS PHP Edition suffers from a command execution vulnerability that can be exploited by attackers to execute malicious code...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/05/25 12:0 a.m.6 views

DotProject suffers from SQL injection vulnerability (CNVD-2020-32472)

DotProject is a Web-based project management tool , using PHP development . DotProject has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/24 12:0 a.m.3 views

SQL Injection Vulnerability in the Website Building System of Tianze Culture Communication (Henan) Co.

Ltd. is a network service company that provides Internet network information services, engages in Internet value-added services, and provides enterprises with customized network solutions, website construction, network promotion and other services. There is a SQL injection vulnerability in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/23 12:0 a.m.2 views

SQL Injection Vulnerability in Website Building System of Zhongshan Cohesion Network Technology Co.

Zhongshan Cohesion Network Technology Co., Ltd. is committed to Internet brand building and network marketing, specializing in areas including website construction, e-commerce, mobile Internet marketing, system platform development, and other services. Zhongshan Cohesion Network Technology Co.,...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/05/21 12:0 a.m.3 views

LJcms v1.29 SQL Injection Vulnerability

LJCMS adopts PHP + Mysql architecture, is a very SEO friendly, full-featured, safe and stable, support multi-terminal display and extremely simple to use enterprise station building system. LJcms v1.29 SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive informatio...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/05/20 12:0 a.m.4 views

Hefei Tianxun Information Technology Co., Ltd. pushes Couponer CMS with SQL injection vulnerability

Push Couponer CMS is a completely free Taobao coupon website source code program. Ltd. Push Couponer CMS has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/05/20 12:0 a.m.4 views

SQL injection vulnerability exists in kkcms (CNVD-2020-33119)

kkcms is an open source video capture and playback system . The system is mainly used to automatically capture film and television resources and provide online playback capabilities. kkcms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information database...

7.7AI score
SaveExploits0
OSV
OSV
added 2020/05/17 2:15 p.m.7 views

CVE-2020-4345

IBM i 7.2, 7.3, and 7.4 users running complex SQL statements under a specific set of circumstances may allow a local user to obtain sensitive information that they should not have access to. IBM X-Force ID: 178318...

3.3CVSS5.8AI score0.00327EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/05/17 12:0 a.m.3 views

SQL Injection Vulnerability in Website Building System of Zonglian Information Technology Co.

Zonglian Technology customizes the official website for each enterprise, and establishes the website construction plan suitable for the enterprise according to the budget, design, industry and enterprise image. With the appropriate display, display effect, site framework, through the integration ...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/16 12:0 a.m.2 views

SQL Injection Vulnerability in ks***_in***.php Page of Stone Technology Online Exam System

Stone Technology Online Exam System is a php and mysql based application that can complete the functions of setting up an exam, creating a question bank, importing a list, starting an exam, randomly selecting questions, awarding scores on the spot, querying after the fact, and exporting scores...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/05/16 12:0 a.m.4 views

SQL Injection Vulnerability in Stone Technology Opinion Analysis Assistant us***.php Page

Stone Technology Public Opinion Analysis Assistant is a monitoring tool that can collect the titles of publicly released information from specified websites and filter out the information and links required by users based on keywords and filters. A SQL injection vulnerability exists in the us.php...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/15 12:0 a.m.3 views

SQL Injection Vulnerability in the Website Building System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology Co., Ltd. is engaged in solving the website construction, Baidu promotion, Baidu bidding hosting, Ali network marketing treasure hosting, optimization station rental and sale. Suzhou Topps Network Technology Co., Ltd. station building system there is a SQL injectio...

7.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.24 views

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to execute arbitrary SQL queries.

The vulnerability in the vManage web interface of the Cisco SD-WAN programmatically defined network is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

5.5CVSS6.7AI score0.54249EPSS
SaveExploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2020/05/12 5:16 p.m.4 views

hibernate: SQL injection issue in Hibernate ORM

A flaw was found in Hibernate ORM. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further...

6.5CVSS5.9AI score0.02126EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/05/12 12:0 a.m.5 views

SQL Injection Vulnerability in Employment Information Service Platform of Shanghai Jiading Information Technology Co.

Shanghai A-Ding Information Technology Co., Ltd. is focusing on college cloud employment information service platform products, adhering to the principle of saas, with many high-quality Internet resources as the basis, to establish employment information service cloud platform. Provide humanized,...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/05/12 12:0 a.m.3 views

Shantou Sanyu Technology Co., Ltd. website building system suffers from SQL injection vulnerability.

Ltd. is a company that focuses on designing, producing and providing personalized e-commerce solutions for enterprises. Ltd. website building system suffers from SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
Rows per page
Query Builder