Lucene search
+L

13320 matches found

OSV
OSV
added 2022/05/14 3:52 a.m.36 views

GHSA-9V7M-F3CV-68RW Dolibarr SQL injection vulnerability in comm/multiprix.php

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

9.8CVSS9.9AI score0.01871EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:51 a.m.27 views

Dolibarr SQL injection vulnerability in fourn/index.php

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

9.8CVSS9AI score0.01871EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:51 a.m.25 views

Dolibarr SQL injection vulnerability in adherents/subscription/info.php

SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter...

9.8CVSS9AI score0.01871EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:51 a.m.12 views

GHSA-6FRC-VFW9-WM27 Dolibarr SQL injection vulnerability in fourn/index.php

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

9.8CVSS9.9AI score0.01871EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/14 3:08 a.m.40 views

GHSA-M5RG-G6F9-8WPW Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS9.9AI score0.01918EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:08 a.m.21 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS9AI score0.01918EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:08 a.m.33 views

GHSA-JJQQ-M998-53JF Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS9.9AI score0.01937EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:08 a.m.25 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS9AI score0.01937EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:00 a.m.26 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS9AI score0.01918EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:00 a.m.70 views

GHSA-24Q2-6X37-CGCX Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS9.9AI score0.01918EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 1:42 a.m.22 views

Dolibarr error-based SQL injection vulnerability in product/card.php

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...

8.8CVSS8.5AI score0.02032EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 1:42 a.m.34 views

GHSA-78HJ-952Q-99RW Dolibarr error-based SQL injection vulnerability in product/card.php

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...

8.8CVSS8.8AI score0.02032EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/14 1:41 a.m.33 views

GHSA-97JV-2HP6-3FRJ Dolibarr SQL injection vulnerability in user/card.php

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

8.8CVSS8.8AI score0.02212EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/14 1:41 a.m.32 views

Dolibarr SQL injection vulnerability in user/card.php

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

8.8CVSS8.5AI score0.02212EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/05/14 1:20 a.m.40 views

GHSA-2PPW-6XVG-RWGW GeniXCMS SQL injection vulnerability

SQL injection vulnerability in inc/lib/Control/Backend/posts.control.php in GeniXCMS 0.0.8 allows remote authenticated administrators to execute arbitrary SQL commands via the id parameter to gxadmin/index.php...

7.2CVSS7.3AI score0.01648EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/05/14 1:09 a.m.38 views

Katello SQL Injection vulnerabilities

Multiple SQL injection vulnerabilities in the scopedsearch function in app/controllers/katello/api/v2/apicontroller.rb in Katello allow remote authenticated users to execute arbitrary SQL commands via the 1 sortby or 2 sortorder parameter...

8.8CVSS6.5AI score0.01835EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2022/05/13 1:11 a.m.40 views

GHSA-FFF9-M6F6-Q3MH Dolibarr SQL Injection vulnerability

SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to /accountancy/admin/accountmodel.php, /accountancy/admin/categorieslist.php, /accountancy/admin/journalslist.php, /admin/dict.php,...

9.8CVSS10AI score0.03959EPSS
SaveExploits0References5
EUVD
EUVD
added 2022/05/13 1:11 a.m.5 views

EUVD-2017-14709

SQL injection vulnerability in wp-includes/class-wp-query.php in WPQuery in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name...

9.8CVSS7.5AI score0.09933EPSS
SaveExploits0References12
Tenable Nessus
Tenable Nessus
added 2022/05/09 12:00 a.m.50 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : postgresql Multiple Vulnerabilities (NS-SA-2022-0038)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has postgresql packages installed that are affected by multiple vulnerabilities: - A flaw was discovered in postgresql versions 9.4.x before 9.4.24, 9.5.x before 9.5.19, 9.6.x before 9.6.15, 10.x before 10.10 and 11.x before 11...

8.8CVSS7.1AI score0.4644EPSS
SaveExploits0References9
CNVD
CNVD
added 2022/05/08 12:00 a.m.29 views

Fortinet FortiNAC SQL Injection Vulnerability

Fortinet FortiNAC is a network access control solution from Fortinet, Inc. Fortinet FortiNAC versions 8.3.7 through 9.2.2 are vulnerable to SQL injection, a vulnerability that originates when user-provided data is not sufficiently cleaned and can be exploited to send ad-hoc requests to affected...

8.8CVSS4.6AI score0.008EPSS
SaveExploits0References1
Rows per page
Query Builder