Lucene search
K

13183 matches found

OSV
OSV
added 2020/02/20 12:15 a.m.3 views

CVE-2013-2018

Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

9.8CVSS8.8AI score
Exploits0References4
Prion
Prion
added 2020/02/20 12:15 a.m.15 views

Sql injection

Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

7.5CVSS9.2AI score0.01965EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/02/19 11:40 p.m.26 views

CVE-2013-2018

Multiple SQL injection vulnerabilities in BOINC allow remote attackers to execute arbitrary SQL commands via unspecified vectors...

10AI score0.01965EPSS
Exploits0References2
Prion
Prion
added 2020/02/19 8:15 p.m.12 views

Sql injection

Multiple SQL injection vulnerabilities in Netsweeper before 2.6.29.10 allow remote attackers to execute arbitrary SQL commands via the 1 login parameter to webadmin/auth/verification.php or 2 dpid parameter to webadmin/deny/index.php...

7.5CVSS9.2AI score0.04064EPSS
Exploits3References1Affected Software1
Prion
Prion
added 2020/02/19 8:15 p.m.21 views

Sql injection

A vulnerability in the web UI of Cisco Cloud Web Security CWS could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this...

4CVSS5.7AI score0.00869EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/19 7:15 p.m.16 views

CVE-2020-3154 Cisco Cloud Web Security SQL Injection Vulnerability

A vulnerability in the web UI of Cisco Cloud Web Security CWS could allow an authenticated, remote attacker to execute arbitrary SQL queries. The vulnerability exists because the web-based management interface improperly validates SQL values. An authenticated attacker could exploit this...

4.9CVSS5.8AI score0.00869EPSS
Exploits0References1
NVD
NVD
added 2020/02/18 6:15 p.m.29 views

CVE-2015-7567

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...

9.8CVSS9.9AI score0.03671EPSS
Exploits5References4
Prion
Prion
added 2020/02/18 6:15 p.m.27 views

Sql injection

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...

7.5CVSS9AI score0.03671EPSS
Exploits5References4Affected Software1
Cvelist
Cvelist
added 2020/02/18 5:41 p.m.32 views

CVE-2015-7567

SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passwordreset&token" parameter...

10AI score0.03671EPSS
Exploits5References4
Prion
Prion
added 2020/02/17 10:15 p.m.24 views

Sql injection

SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte...

7.5CVSS8.8AI score0.0255EPSS
Exploits1References4Affected Software3
UbuntuCve
UbuntuCve
added 2020/02/17 10:15 p.m.25 views

CVE-2014-8089

SQL injection vulnerability in Zend Framework before 1.12.9, 2.2.x before 2.2.8, and 2.3.x before 2.3.3, when using the sqlsrv PHP extension, allows remote attackers to execute arbitrary SQL commands via a null byte...

9.8CVSS7.5AI score0.0255EPSS
Exploits1References3
NVD
NVD
added 2020/02/12 3:15 p.m.14 views

CVE-2015-5617

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...

9.8CVSS10AI score0.0199EPSS
Exploits4References2
Prion
Prion
added 2020/02/12 3:15 p.m.7 views

Sql injection

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...

7.5CVSS9AI score0.0199EPSS
Exploits4References2
Cvelist
Cvelist
added 2020/02/12 2:30 p.m.21 views

CVE-2015-5617

SQL injection vulnerability in pub/mpendingnews/deletependingnews.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter...

10AI score0.0199EPSS
Exploits4References2
Prion
Prion
added 2020/02/11 8:15 p.m.10 views

Sql injection

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

7.5CVSS9.1AI score0.04162EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2020/02/11 8:0 p.m.21 views

CVE-2012-1124

SQL injection vulnerability in search.php in phxEventManager 2.0 beta 5 allows remote attackers to execute arbitrary SQL commands via the searchterms parameter...

10AI score0.04162EPSS
Exploits1References5
CNVD
CNVD
added 2020/02/11 12:0 a.m.2 views

TestLink SQL Injection Vulnerability

TestLink is a set of open source software for managing the software testing process and providing statistical analysis. A SQL injection vulnerability exists in TestLink version 1.9.19. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based...

8.8CVSS8.2AI score0.01426EPSS
Exploits1References1
NVD
NVD
added 2020/02/08 6:15 p.m.30 views

CVE-2015-2062

Multiple SQL injection vulnerabilities in the Huge-IT Slider slider-image plugin before 2.7.0 for WordPress allow remote administrators to execute arbitrary SQL commands via the removeslide parameter in a popupposts or editcat action in the slidershugeitslider page to wp-admin/admin.php...

7.2CVSS7.8AI score0.02446EPSS
Exploits3References4
Prion
Prion
added 2020/02/08 6:15 p.m.13 views

Sql injection

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 ctrl, 2 h%2427, 3 h%2439, 4 param0, 5 param1, 6 param2, 7 param3, 8 param4, 9 filterINSERTCOUNT, 10 filterMINORFALLOUT, 11...

6.5CVSS8.7AI score0.02378EPSS
Exploits3References2Affected Software1
Cvelist
Cvelist
added 2020/02/08 5:34 p.m.19 views

CVE-2015-3423

Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated users to execute arbitrary SQL commands via the 1 ctrl, 2 h%2427, 3 h%2439, 4 param0, 5 param1, 6 param2, 7 param3, 8 param4, 9 filterINSERTCOUNT, 10 filterMINORFALLOUT, 11...

9.2AI score0.02378EPSS
Exploits3References2
Rows per page
Query Builder