Lucene search
+L

44 matches found

BDU FSTEC
BDU FSTEC
•added 2025/04/07 12:00 a.m.•19 views

The vulnerability of the Apache Fineract digital financial services platform, related to the lack of measures to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Apache Fineract digital financial services platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary SQL code...

9.1CVSS8.5AI score0.01541EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/12 12:00 a.m.•16 views

The vulnerability of the Centreon-web component of the Centreon software for monitoring IT infrastructure allows a perpetrator to influence the confidentiality, accessibility, and integrity of the protected information.

The vulnerability of the centreon-web component of the IT infrastructure monitoring software relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, accessibility, and integrity of the protect...

9.1CVSS7.8AI score0.01122EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/30 12:00 a.m.•15 views

The vulnerability of the EdOnline EMS system allows a perpetrator to disclose protected information.

The vulnerability of the EdOnline EMS educational process management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

9.9CVSS5.6AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/08/12 12:00 a.m.•16 views

The vulnerability of the multi-site content management system UMI CMS, related to the lack of measures taken to protect the SQL query structure, allows for the execution of arbitrary SQL queries.

The vulnerability of the multi-site content management system UMI CMS is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries through the comment creation function of the forum...

7.8CVSS6AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/07/05 12:00 a.m.•15 views

The vulnerability of the query_contract_result function in the MCUDBHelper component of the corporate version of the PowerPanel Enterprise monitoring and control system allows a perpetrator to disclose protected information.

The vulnerability of the querycontractresult function in the MCUDBHelper component of the corporate version of the PowerPanel Enterprise monitoring and power source management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow...

7.8CVSS5.6AI score0.05408EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/10 12:00 a.m.•17 views

The vulnerability of the GetRulesetsSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.

The vulnerability of the GetRulesetsSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a...

9CVSS8AI score0.08484EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2024/06/03 12:00 a.m.•14 views

The vulnerability in the projets.php script of the SOPlanning CMS system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the projets.php script within the SOPlanning CMS system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS5.9AI score0.00241EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/06/03 12:00 a.m.•13 views

The vulnerability of the `BaproductzoommagnifierZoomModuleFrontController::run()` method in the Best Zoom Magnifier Effect module – BAZoom Magnifier, a open-source e-commerce web application for PrestaShop. This vulnerability allows an attacker to elevate their privileges and gain access to read, modify, or delete data.

The vulnerability of the BaproductzoommagnifierZoomModuleFrontController::run method in the Best Zoom Magnifier Effect – BAZoom Magnifier web application for e-commerce with open-source PrestaShop is related to the lack of protective measures for the SQL query structure. Exploiting this...

10CVSS7.8AI score0.00748EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/04/27 12:00 a.m.•13 views

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes, related to the failure to protect the SQL request structure, allows attackers to execute arbitrary SQL queries.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management functions is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

10CVSS7AI score0.6296EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/16 12:00 a.m.•13 views

The vulnerability of the software for network monitoring and management of IT infrastructure on the SolarWinds Platform lies in the lack of protective measures for the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the software for network monitoring and management of IT infrastructure on the SolarWinds Platform lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8CVSS8.1AI score0.01578EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/29 12:00 a.m.•13 views

The vulnerability of the Apache Submarine machine learning platform, related to the lack of protection for SQL query structures, allows attackers to execute arbitrary SQL queries.

The vulnerability of the Apache Submarine machine learning platform relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS8.2AI score0.07225EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/11/27 12:00 a.m.•11 views

The vulnerability of the clearAlertByIds() function in the ProSAFE Network Management System (NMS300) allows a hacker to increase their privileges.

The vulnerability of the clearAlertByIds function in the ProSAFE Network Management System NMS300 for managing, diagnosing, and optimizing network devices is related to the lack of protection for the SQL query structure. Exploiting this vulnerability could allow a malicious actor to increase thei...

9CVSS7.7AI score0.52562EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/08/11 12:00 a.m.•18 views

The vulnerability of component B1i Layer of the SAP Business One resource management system allows a hacker to gain access to read, modify, or delete data.

The vulnerability of component B1i Layer in the SAP Business One resource management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to remotely gain access to read, modify, or delete data by sending...

7.1CVSS7.3AI score0.00576EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/02/21 12:00 a.m.•29 views

The vulnerability of the ExploreIT website content management system, related to the lack of measures to protect the SQL query structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the ExploreIT website content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

10CVSS7.6AI score0.04051EPSS
SaveExploits3References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/02/15 12:00 a.m.•16 views

The vulnerability of the centralized control system for network devices and ports of Advantech iView, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL commands.

The vulnerability of the centralized control system for network devices and ports of Advantech iView relates to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

9CVSS7.2AI score0.09118EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•24 views

The vulnerability of the Roundcube webmail client, related to the lack of measures taken to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the Roundcube webmail client stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL code using the search or searchparams parameters...

9.8CVSS8.6AI score0.69882EPSS
SaveExploits1References12Affected Software3
BDU FSTEC
BDU FSTEC
•added 2021/08/25 12:00 a.m.•13 views

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system allows attackers to perform cross-site scripting attacks.

The vulnerability of the empViewUpdate.php implementation of the online e-commerce sales system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

9.8CVSS7.5AI score0.01476EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•15 views

The vulnerability in the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website allows attackers to execute arbitrary SQL queries.

The vulnerability of the plugin/Audit/Objects/AuditTable.php component of the YouPHPTube website is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

5.3CVSS6.3AI score0.02984EPSS
SaveExploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/06/23 12:00 a.m.•20 views

The vulnerability of the DataTables library, related to the lack of measures taken to protect the SQL query structure, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the DataTables library is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.9AI score0.01407EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2021/03/02 12:00 a.m.•28 views

The vulnerability of Dollibarr’s software lies in its lack of protection for SQL query structures, allowing attackers to execute arbitrary SQL commands.

The vulnerability of Dollibarr’s software lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

10CVSS8.2AI score0.03899EPSS
SaveExploits0References4Affected Software2
Rows per page
Query Builder