Lucene search
+L

15256 matches found

Check Point Advisories
Check Point Advisories
•added 2022/02/21 12:00 a.m.•145 views

WordPress WP_Query SQL Injection (CVE-2022-21661)

An SQL injection vulnerability exists in WordPress WPQuery. Successful exploitation of this vulnerability could result in the execution of arbitrary SQL statements on the affected system...

5CVSS3.2AI score0.97795EPSS
SaveExploits14
Prion
Prion
•added 2022/02/16 5:15 p.m.•39 views

Sql injection

The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the exclusionreason parameter found in the /includes/class-wp-statistics-exclusion.php file which allows attackers without authentication to inject arbitrary SQL queries to obtai...

4.3CVSS7.8AI score0.5346EPSS
SaveExploits3References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/02/10 12:00 a.m.•4 views

PT-2022-2055

Name of the Vulnerable Software and Affected Versions SyliusGridBundle versions prior to 1.10.1 and 1.11-rc2 Description The issue is related to the SyliusGridBundle package for Symfony applications, where values added at the end of query sorting were passed directly to the database. This could...

10CVSS0.01392EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•25 views

Rockwell Automation MicroLogix SQL Injection (CVE-2015-6486)

SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

6.5CVSS6AI score0.04292EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/02/07 12:00 a.m.•29 views

Emerson DeltaV SQL Injection (CVE-2012-1815)

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. This plugin only works with Tenable.ot. Please visit...

7.5CVSS6.2AI score0.01494EPSS
SaveExploits0References5
Veracode
Veracode
•added 2022/01/25 5:08 a.m.•18 views

SQL Injection

github.com/navidrome/navidrome is vulnerable to SQL injection. The vulnerability exists in OrderBy function of criteria.go due to not handling the conditional sql statements properly which allows a malicious attacker to inject and execute arbitrary SQL...

6.5CVSS3.3AI score0.00932EPSS
SaveExploits0References3Affected Software2
attackerkb
attackerkb
•added 2022/01/24 7:15 p.m.•18 views

CVE-2021-43420

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.1AI score0.01289EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/01/24 6:15 p.m.•13 views

CVE-2021-41659

SQL injection vulnerability in Sourcecodester Banking System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username or password field...

9.8CVSS6.1AI score0.01254EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/24 4:15 p.m.•23 views

CVE-2021-41471

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS0.01228EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/01/24 4:15 p.m.•12 views

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

9.8CVSS6.1AI score0.01254EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/24 4:15 p.m.•22 views

Sql injection

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

7.5CVSS10AI score0.01254EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/24 3:54 p.m.•34 views

CVE-2021-41472

SQL injection vulnerability in Sourcecodester Simple Membership System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password parameters...

10AI score0.01254EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/24 3:34 p.m.•37 views

CVE-2021-41471

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

10AI score0.01228EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/24 3:15 p.m.•8 views

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS7.6AI score0.02534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2022/01/24 2:54 p.m.•16 views

EUVD-2021-28063

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS10AI score0.02534EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•18 views

Sourcecodester Purchase Order Management System SQL注入漏洞

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

9.8CVSS6.1AI score0.02534EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•7 views

CVE-2021-43420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.4AI score0.01289EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•16 views

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System, which originated in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, and can be...

9.8CVSS8.8AI score0.01228EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•8 views

CVE-2021-41471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS6.3AI score0.01228EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/21 8:15 p.m.•24 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01356EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder