Lucene search
K

13183 matches found

Check Point Advisories
Check Point Advisories
added 2020/07/01 12:0 a.m.0 views

PHP Fusion SQL injection

An SQL injection vulnerability exists in the PHP Fusion. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

4.9AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2020/06/28 12:0 a.m.4 views

Joomla Ek Rishta SQL Injection (CVE-2018-7315)

An SQL injection vulnerability exists in Joomla Ek Rishta component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.9AI score0.02802EPSS
Exploits5
Veracode
Veracode
added 2020/06/19 5:28 a.m.20 views

SQL Injection

dolibarr/dolibarr is vulnerable to SQL injection. The vulnerability exists as the id parameter type was not enforced to the int type, and could be used to inject and execute arbitrary SQL statements...

8.8CVSS2.9AI score0.01147EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2020/06/18 6:15 p.m.15 views

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

8.8CVSS8.2AI score
Exploits0References1
Prion
Prion
added 2020/06/18 6:15 p.m.23 views

Sql injection

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

6.5CVSS8.8AI score0.01147EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/06/18 5:26 p.m.18 views

CVE-2020-14443

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter...

8.9AI score0.01147EPSS
Exploits0References1
Prion
Prion
added 2020/06/18 3:15 p.m.12 views

Sql injection

A SQL injection issue in the gVectors wpDiscuz plugin 5.3.5 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the order parameter of a wpdLoadMoreComments request. No 7.x versions are affected...

7.5CVSS10AI score0.12706EPSS
Exploits1References5Affected Software1
CNVD
CNVD
added 2020/06/17 12:0 a.m.2 views

PHP-Fusion has multiple vulnerabilities Vulnerabilities

PHP-Fusion is a lightweight open source content management system . It uses mySQL database to store site content and provide a simple , comprehensive back-end management system . PHP-Fusion includes most of the CMS system has the functionality . PHP-Fusion has PHP object injection and SQL injecti...

8.2AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/06/17 12:0 a.m.7 views

The vulnerability of the SQLite database management system lies in the lack of protection for SQL query structures, which allows attackers to trigger a service failure.

The vulnerability of the SQLite database management system is related to the lack of protection for SQL query structures. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination by executing arbitrary SQL commands...

7.8CVSS7AI score0.06766EPSS
Exploits1References11Affected Software7
Check Point Advisories
Check Point Advisories
added 2020/06/16 12:0 a.m.5 views

Symphony CMS SQL Injection (CVE-2013-2559)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

6.5CVSS5.1AI score0.02355EPSS
Exploits3
Veracode
Veracode
added 2020/06/04 4:48 a.m.20 views

SQL Injection

@nozbe/watermelondb is vulnerable to SQL Injection. A remote attacker is able to inject and execute arbitrary SQL statements via the id parameter...

5.9CVSS6.1AI score0.00763EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2020/05/20 11:15 a.m.20 views

CVE-2020-5579

SQL injection vulnerability in the Paid Memberships versions prior to 2.3.3 allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

7.2CVSS7.3AI score0.0119EPSS
Exploits0References2
Check Point Advisories
Check Point Advisories
added 2020/05/18 12:0 a.m.10 views

vBulletin nodeId SQL Injection (CVE-2020-12720)

An SQL injection vulnerability exists in vBulletin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.88948EPSS
Exploits13
CNVD
CNVD
added 2020/05/11 12:0 a.m.4 views

WordPress Chop Slider SQL Injection Vulnerability

WordPress is the WordPress Foundation's set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Chop Slider is a jQuery slider plugin used in it. A SQL injection vulnerability exists in the 'id' GET parameter of the...

9.8CVSS8.2AI score0.95657EPSS
Exploits8
OSV
OSV
added 2020/05/08 8:15 p.m.3 views

CVE-2020-11530

A blind SQL injection vulnerability is present in Chop Slider 3, a WordPress plugin. The vulnerability is introduced in the id GET parameter supplied to getscript/index.php, and allows an attacker to execute arbitrary SQL queries in the context of the WP database user...

9.8CVSS7.5AI score0.95657EPSS
Exploits8References5
CNVD
CNVD
added 2020/05/07 12:0 a.m.8 views

Wordpress LearnPress SQL Injection Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.LearnPress is a learning management system plugin used in it. A SQL injection vulnerability exists in Wordpress LearnPress...

8.8CVSS8.1AI score0.49231EPSS
Exploits6References1
Check Point Advisories
Check Point Advisories
added 2020/04/30 12:0 a.m.1 views

WordPress LearnPress Plugin SQL Injection

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

4.9AI score
Exploits0
Check Point Advisories
Check Point Advisories
added 2020/04/30 12:0 a.m.10 views

WordPress LearnDash Plugin SQL Injection (CVE-2020-6009)

An SQL injection vulnerability exists in the WordPress LearnDash Plugin. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.8AI score0.0184EPSS
Exploits0
Packet Storm
Packet Storm
added 2020/04/21 12:0 a.m.149 views

PMB 5.6 SQL Injection

Exploit Title: PMB 5.6 - 'logid' SQL Injection Google Dork: inurl:opaccss Date: 2020-04-20 Exploit Author: 41-trk Tarik Bakir Vendor Homepage: http://www.sigb.net Software Link: http://forge.sigb.net/redmine/projects/pmb/files Affected versions : = 5.6 -==== Software Description ====- PMB is a...

0.3AI score
Exploits0
OSV
OSV
added 2020/04/15 3:15 p.m.12 views

CVE-2020-11537

A SQL Injection issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can execute arbitrary SQL queries via injection to DocID parameter of Websocket API...

9.8CVSS8.5AI score
Exploits0References2
Rows per page
Query Builder