Lucene search
+L

48 matches found

Prion
Prion
•added 2018/06/27 6:29 p.m.•26 views

Sql injection

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI...

6.5CVSS7.3AI score0.02649EPSS
SaveExploits5References2Affected Software1
NVD
NVD
•added 2018/06/27 6:29 p.m.•51 views

CVE-2018-12912

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI...

7.2CVSS7.4AI score0.02649EPSS
SaveExploits5References2
CVE
CVE
•added 2018/06/27 6:00 p.m.•86 views

CVE-2018-12912

HongCMS 3.0.0 contains a SQL Injection vulnerability in admin/controllers/database.php, exploitable via the request admin/index.php/database/operate?dbaction=emptytable&tablename= (URI). Public exploit/activity references show an authenticated/remote-exploit path using this parameter to inject SQ...

7.2CVSS7.3AI score0.02649EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2018/06/27 6:00 p.m.•60 views

CVE-2018-12912

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI...

7.3AI score0.02649EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2018/06/27 12:00 a.m.•5 views

PT-2018-11469

Name of the Vulnerable Software and Affected Versions HongCMS version 3.0.0 Description A SQL Injection issue was discovered in the admin/controllers/database.php file. The issue can be exploited via the "admin/index.php/database/operate?dbaction=emptytable&tablename=" URI, allowing for potential...

7.2CVSS0.02649EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/27 12:00 a.m.•7 views

CVE-2018-12912: Improper Neutralization of Special Elements used in an SQL Command

An issue wan discovered in admin\controllers\database.php in HongCMS 3.0.0. There is a SQL Injection vulnerability via an admin/index.php/database/operate?dbaction=emptytable&tablename= URI...

7.2CVSS7.2AI score0.02649EPSS
SaveExploits5References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/09/05 12:00 a.m.•9 views

CVE-2017-14145: Improper Neutralization of Special Elements used in an SQL Command

HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\controllers\loginController.php via the admin/login/getWarningInfo/id/ PATHINFO, related to the selectWarning function...

9.8CVSS5.9AI score0.01161EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2017/08/21 12:00 a.m.•10 views

PT-2017-12815

Name of the Vulnerable Software and Affected Versions Photo Gallery by WD - Responsive Photo Gallery versions prior to 1.3.51 Description The issue is related to a SQL injection vulnerability. It is associated with the bwg edit tag function in photo-gallery.php and the edit tag function in...

7.2CVSS0.01593EPSS
SaveExploits0References4
Rows per page
Query Builder