Lucene search
+L

73 matches found

Cvelist
Cvelist
added 2023/12/20 12:0 a.m.28 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

10AI score0.0078EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/06/22 11:15 a.m.4 views

CVE-2023-34601

Jeesite before commit 10742d3 was discovered to contain a SQL injection vulnerability via the component $businessTable at /act/ActDao.xml...

9.8CVSS7.4AI score0.00692EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/08 2:15 p.m.3 views

CVE-2023-2114

The NEX-Forms WordPress plugin before 8.4 does not properly escape the table parameter, which is populated with user input, before concatenating it to an SQL query...

7.2CVSS7.2AI score0.44629EPSS
SaveExploits3References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:14 a.m.6 views

SUSE CVE-2006-3388

Cross-site scripting XSS vulnerability in phpMyAdmin before 2.8.2 allows remote attackers to inject arbitrary web script or HTML via the table parameter...

5.8CVSS6AI score0.01726EPSS
SaveExploits0References4
NVD
NVD
added 2022/08/17 9:15 p.m.19 views

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

6.5CVSS0.00608EPSS
SaveExploits1References1
CVE
CVE
added 2022/08/17 8:56 p.m.65 views

CVE-2022-35148

The CVE-2022-35148 entry concerns maccms10 versions from v2021.1000.1081 to v2022.1000.3031, where a SQL injection exists via the table parameter on the database/columns.html endpoint. Root cause: unsafe handling of the table parameter leads to injection. Impact is described as SQL injection; no ...

6.5CVSS6.7AI score0.00608EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/17 8:56 p.m.19 views

CVE-2022-35148

maccms10 v2021.1000.1081 to v2022.1000.3031 was discovered to contain a SQL injection vulnerability via the table parameter at database/columns.html...

7AI score0.00608EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/08/17 12:0 a.m.8 views

PT-2022-22600 · Maccms10 · Maccms10

Name of the Vulnerable Software and Affected Versions: maccms10 versions v2021.1000.1081 through v2022.1000.3031 Description: A SQL injection issue was found via the table parameter at the "database/columns.html" endpoint. Recommendations: For versions v2021.1000.1081 through v2022.1000.3031, avo...

6.5CVSS6.9AI score0.00608EPSS
SaveExploits1References2
OSV
OSV
added 2020/11/13 4:15 p.m.2 views

CVE-2020-21667

In fastadmin-tp6 v1.0, in the file app/admin/controller/Ajax.php the 'table' parameter passed is not filtered so a malicious parameter can be passed for SQL injection...

7.2CVSS7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2019/10/04 8:55 p.m.15 views

CVE-2008-5621

Cross-site request forgery CSRF vulnerability in phpMyAdmin 2.11.x before 2.11.9.4 and 3.x before 3.1.1.0 allows remote attackers to perform unauthorized actions as the administrator via a link or IMG tag to tblstructure.php with a modified table parameter. NOTE: other unspecified pages are also...

6CVSS8.6AI score0.0215EPSS
SaveExploits1References3
NVD
NVD
added 2019/09/22 3:15 p.m.21 views

CVE-2019-16696

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...

9.8CVSS9.9AI score0.01881EPSS
SaveExploits1References1
OSV
OSV
added 2019/09/22 3:15 p.m.16 views

CVE-2019-16692

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/filter-result.php table parameter when action=add is used...

9.8CVSS7.8AI score
SaveExploits0References2
OSV
OSV
added 2019/09/22 3:15 p.m.16 views

CVE-2019-16694

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...

9.8CVSS8AI score
SaveExploits0References1
Cvelist
Cvelist
added 2019/09/22 2:58 p.m.37 views

CVE-2019-16693

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/order.php table parameter when action=add is used...

10AI score0.04338EPSS
SaveExploits3References2
Cvelist
Cvelist
added 2019/09/22 2:58 p.m.22 views

CVE-2019-16694

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit-result.php table parameter when action=add is used...

10AI score0.01881EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/09/22 2:58 p.m.24 views

CVE-2019-16696

phpIPAM 1.4 allows SQL injection via the app/admin/custom-fields/edit.php table parameter when action=add is used...

10AI score0.01881EPSS
SaveExploits1References1
Prion
Prion
added 2017/03/20 4:59 p.m.12 views

Sql injection

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...

7.5CVSS10AI score0.03974EPSS
SaveExploits5References4
Cvelist
Cvelist
added 2017/03/20 4:0 p.m.25 views

CVE-2017-6550

Multiple SQL injection vulnerabilities in Kinsey Infor-Lawson formerly ESBUS allow remote attackers to execute arbitrary SQL commands via the 1 TABLE parameter to esbus/servlet/GetSQLData or 2 QUERY parameter to KKLS9ReportingPortal/GetData...

10AI score0.03974EPSS
SaveExploits5References4
CNVD
CNVD
added 2015/08/19 12:0 a.m.6 views

phpLiteAdmin Cross-Site Scripting Vulnerability

phpLiteAdmin is a software developer Dane Iracleous developed a set of PHP implementation and Web-based open-source SQLite database management tool . A cross-site scripting vulnerability exists in phpLiteAdmin version 1.1, which stems from a failure of the phpliteadmin.php script to adequately...

4.3CVSS6.2AI score0.03525EPSS
SaveExploits3References1
Debian CVE
Debian CVE
added 2015/08/18 5:0 p.m.43 views

CVE-2015-6518

Multiple cross-site scripting XSS vulnerabilities in phpLiteAdmin 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 PATHINFO, 2 droptable parameter, or 3 table parameter to phpliteadmin.php...

4.3CVSS5.7AI score0.03525EPSS
SaveExploits3
Rows per page
Query Builder