Lucene search
+L

6 matches found

Exploit DB
Exploit DB
•added 2020/05/11 12:00 a.m.•186 views

LibreNMS 1.46 - 'search' SQL Injection

Exploit Title: LibreNMS 1.46 - 'search' SQL Injection Google Dork:unknown Date: 2019-09-01 Exploit Author: Punt Vendor Homepage: https://www.librenms.org Software Link: https://www.librenms.org Version:1.46 and less Tested on:Linux and Windows CVE: N/A Affected Device: more than 4k found on Shoda...

5.3AI score
SaveExploits0
zdt
zdt
•added 2020/05/11 12:00 a.m.•53 views

LibreNMS 1.46 - (search) SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: LibreNMS 1.46 - 'search' SQL Injection Google Dork:unknown Exploit Author: Punt Vendor Homepage: https://www.librenms.org Software Link: https://www.librenms.org Version:1.46 and less Tested on:Linux and Windows CVE: N/A Affecte...

0.3AI score
SaveExploits0
Prion
Prion
•added 2015/08/18 3:59 p.m.•22 views

Sql injection

SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search parameter to ajax/ajaxsearch.php...

6.5CVSS8.6AI score0.02002EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2015/08/18 3:00 p.m.•55 views

CVE-2015-6516

sysPass (cygnux.org) is affected by a SQL injection vulnerability in versions 1.0.9 and earlier. The flaw arises in ajax/ajax_search.php where the search parameter is not properly filtered, allowing remote authenticated users to execute arbitrary SQL commands. This aligns with multiple sources (N...

6.5CVSS8.2AI score0.02002EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2015/08/18 3:00 p.m.•33 views

CVE-2015-6516

SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search parameter to ajax/ajaxsearch.php...

7.9AI score0.02002EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/08/18 12:00 a.m.•5 views

CVE-2015-6516: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cygnux.org sysPass 1.0.9 and earlier allows remote authenticated users to execute arbitrary SQL commands via the search parameter to ajax/ajaxsearch.php...

6.5CVSS6.4AI score0.02002EPSS
SaveExploits2References2
Rows per page
Query Builder