Lucene search
+L

2407 matches found

CNNVD
CNNVD
added 2022/08/25 12:0 a.m.9 views

TOTOLINK A3600R 操作系统命令注入漏洞

The TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's TOTOLINK. An operating system command injection vulnerability exists in the TOTOLINK A3600R version V4.1.2cu.5182B20201102, which stems from a command injection issue with the username parameter in the /cstecgi.cgi location...

7.8CVSS5.6AI score0.01086EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.8 views

PT-2022-23380 · Totolink · Totolink A720R

Name of the Vulnerable Software and Affected Versions: TOTOLink A720R version 4.1.5cu.532 B20210610 Description: A command injection issue was discovered via the username parameter in the "/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For TOTOLi...

7.8CVSS7.7AI score0.01086EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.6 views

PT-2022-23379 · Totolink · Totolink A3600R

Name of the Vulnerable Software and Affected Versions: TOTOLink A3600R version 4.1.2cu.5182 B20201102 Description: A command injection issue was found via the username parameter in the "/cstecgi.cgi" API endpoint. This allows for potential command injection attacks. Recommendations: For TOTOLink...

7.8CVSS7.7AI score0.01086EPSS
SaveExploits1References3
NVD
NVD
added 2022/08/18 2:15 a.m.17 views

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

9.8CVSS0.00757EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/18 2:15 a.m.7 views

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

9.8CVSS6AI score0.00757EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/08/18 2:15 a.m.3 views

CVE-2022-35598

A SQL injection vulnerability in ConnectionFactoryDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via parameter username...

9.8CVSS7.7AI score0.00757EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/18 12:0 a.m.6 views

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A SQL injection vulnerability exists in InventoryManagementSystem version 1.0, which...

9.8CVSS9AI score0.00757EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.22 views

Automated Beer Parlour Billing System SQL注入漏洞

Automated Beer Parlour Billing System is an automated hotel beer billing system by the individual developer Senior Walter. A security vulnerability exists in Automated Beer Parlour Billing System. An attacker could exploit the vulnerability by manipulating the parameter username to cause an sql...

9.8CVSS8.3AI score0.00549EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/12 12:0 a.m.5 views

Gas Agency Management System SQL注入漏洞

Gas Agency Management System is a gas agency management software by Mayuri K. Personal Developer. It is used to manage the daily operations of a gas agency. A SQL injection vulnerability exists in Gas Agency Management System. An attacker can exploit this vulnerability by manipulating the paramet...

9.8CVSS8.5AI score0.00657EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.6 views

SourceCodester Garage Management System SQL注入漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you manage all your vehicles, cars and motorcycles. An SQL injection vulnerability exists in SourceCodester Garage Management System, which stems from the parameter...

8.8CVSS8.2AI score0.00475EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.6 views

Church Management System SQL注入漏洞

Church Management System is a church management system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Church Management System, which stems from an unknown function in its login.php component that operates on a special string input for the parameter username, resulting...

8.8CVSS8AI score0.00625EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.9 views

PT-2022-18085 · Sourcecodester · Sourcecodester One Church Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Church Management System version 1.0 Description: A critical issue has been discovered, allowing for SQL injection. This is achieved by manipulating the username argument in the /login.php file with a specifically crafted input...

8.8CVSS9AI score0.00625EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/08/05 12:0 a.m.6 views

PT-2022-18025 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Garage Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Garage Management System, allowing for SQL injection through the manipulation of the userName/uemail...

8.8CVSS9AI score0.00475EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/07/29 12:0 a.m.6 views

SourceCodester Garage Management System 跨站脚本漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It can help you manage all your vehicles, cars and motorcycles. A cross-site scripting vulnerability exists in SourceCodester Garage Management System version 1.0, which stems from the...

5.4CVSS4.9AI score0.00533EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/26 1:15 p.m.5 views

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

9.8CVSS7.3AI score0.01222EPSS
SaveExploits1References1
NVD
NVD
added 2022/07/26 1:15 p.m.15 views

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

9.8CVSS0.01222EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/26 1:15 p.m.5 views

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

9.8CVSS7.4AI score0.01222EPSS
SaveExploits1References2
Prion
Prion
added 2022/07/26 1:15 p.m.22 views

Sql injection

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

7.5CVSS9.8AI score0.01222EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/07/26 12:57 p.m.43 views

CVE-2022-36161

CVE-2022-36161 affects Orange Station 1.0, with a SQL injection vulnerability exploitable via the username parameter. Root cause: improper handling of user input in the login/authentication flow leading to SQL injection. Potential impact: unauthorized access and data disclosure if exploited (as d...

9.8CVSS9.7AI score0.01222EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/26 12:57 p.m.24 views

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

10AI score0.01222EPSS
SaveExploits1References1
Rows per page
Query Builder