Lucene search
K

13184 matches found

NVD
NVD
added 2017/12/27 5:8 p.m.16 views

CVE-2017-17897

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

9.8CVSS10AI score0.01871EPSS
Exploits0References1
Prion
Prion
added 2017/12/27 5:8 p.m.10 views

Sql injection

SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter...

7.5CVSS9.9AI score0.01871EPSS
Exploits0References1Affected Software1
UbuntuCve
UbuntuCve
added 2017/12/27 5:8 p.m.14 views

CVE-2017-17900

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

9.8CVSS7.5AI score0.01871EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/12/24 6:0 p.m.23 views

CVE-2017-17899

SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter...

10AI score0.01871EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/12/24 6:0 p.m.16 views

CVE-2017-17900

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

10AI score0.01871EPSS
Exploits0References1
Cvelist
Cvelist
added 2017/12/24 6:0 p.m.18 views

CVE-2017-17897

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

10AI score0.01871EPSS
Exploits0References1
Prion
Prion
added 2017/12/20 9:29 p.m.13 views

Sql injection

SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL commands via the loginName field...

10CVSS9.1AI score0.59146EPSS
Exploits1References5Affected Software3
NVD
NVD
added 2017/12/19 2:29 a.m.13 views

CVE-2017-15875

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter...

9.8CVSS10AI score0.01288EPSS
Exploits1References1
Cvelist
Cvelist
added 2017/12/18 5:0 p.m.18 views

CVE-2017-15875

SQL injection vulnerability in Password Recovery in GPWeb 8.4.61 allows remote attackers to execute arbitrary SQL commands via the "checkemail" parameter...

10AI score0.01288EPSS
Exploits1References1
exploitpack
exploitpack
added 2017/12/14 12:0 a.m.37 views

Piwigo 2.9.1 - cat_true cat_false SQL Injection

Piwigo 2.9.1 - cattrue catfalse SQL Injection Exploit Title: Piwigo = 2.9.1 - 'cattrue'/'catfalse' SQL Injection Dork: N/A Date: 12.12.2017 Vendor Homepage: http://piwigo.org/ Software Link: http://piwigo.org/basics/downloads Version: = 2.9.1 Category: Webapps Tested on: WiN7x64/WIN10X64 CVE:...

7.5CVSS0.1AI score0.08239EPSS
Exploits5
Exploit DB
Exploit DB
added 2017/12/14 12:0 a.m.54 views

Piwigo 2.9.1 - 'cat_true' / 'cat_false' SQL Injection

Exploit Title: Piwigo = 2.9.1 - 'cattrue'/'catfalse' SQL Injection Dork: N/A Date: 12.12.2017 Vendor Homepage: http://piwigo.org/ Software Link: http://piwigo.org/basics/downloads Version: = 2.9.1 Category: Webapps Tested on: WiN7x64/WIN10X64 CVE: CVE-2017-10682 Exploit Author: Akityo Email:...

9.8CVSS9.6AI score0.08239EPSS
Exploits5
OpenVAS
OpenVAS
added 2017/11/29 12:0 a.m.36 views

ManageEngine Applications Manager < 13530 Multiple SQLi Vulnerabilities

ManageEngine Applications Manager is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

9.8CVSS7.7AI score0.16644EPSS
Exploits1References1
Prion
Prion
added 2017/11/08 4:29 p.m.12 views

Sql injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

7.5CVSS9.2AI score0.0376EPSS
Exploits4References2Affected Software1
Cvelist
Cvelist
added 2017/11/08 4:0 p.m.31 views

CVE-2015-3933

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

10AI score0.0376EPSS
Exploits4References2
Prion
Prion
added 2017/10/29 5:29 p.m.12 views

Sql injection

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

6.5CVSS7.3AI score0.01754EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2017/10/29 5:29 p.m.8 views

CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

7.2CVSS8.3AI score
Exploits0References1
NVD
NVD
added 2017/10/29 5:29 p.m.19 views

CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

7.2CVSS7.3AI score0.01754EPSS
Exploits1References1
Prion
Prion
added 2017/10/27 7:29 p.m.9 views

Sql injection

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

6.5CVSS7.3AI score0.02279EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2017/10/27 7:29 p.m.10 views

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

7.2CVSS8.3AI score
Exploits0References2
NVD
NVD
added 2017/10/27 7:29 p.m.9 views

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

7.2CVSS7.3AI score0.02279EPSS
Exploits1References2
Rows per page
Query Builder