Lucene search
+L

15348 matches found

Prion
Prion
•added 2017/11/08 4:29 p.m.•25 views

Sql injection

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

7.5CVSS9.2AI score0.0376EPSS
SaveExploits4References2Affected Software1
Cvelist
Cvelist
•added 2017/11/08 4:00 p.m.•54 views

CVE-2015-3933

Multiple SQL injection vulnerabilities in inc/lib/User.class.php in MetalGenix GeniXCMS before 0.0.3-patch allow remote attackers to execute arbitrary SQL commands via the 1 email parameter or 2 userid parameter to register.php...

10AI score0.0376EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2017/11/02 12:00 a.m.•8 views

PT-2017-12451

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Software Releases prior to 12.3 Description A vulnerability in the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact...

8.1CVSS0.0142EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/02 12:00 a.m.•9 views

CVE-2017-12276: Improper Input Validation

A vulnerability in the web framework code for the SQL database interface of the Cisco Prime Collaboration Provisioning application could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. Th...

8.1CVSS7.6AI score0.0142EPSS
SaveExploits0References3
NVD
NVD
•added 2017/10/29 5:29 p.m.•39 views

CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

7.2CVSS7.3AI score0.01754EPSS
SaveExploits1References1
Prion
Prion
•added 2017/10/29 5:29 p.m.•32 views

Sql injection

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

6.5CVSS7.3AI score0.01754EPSS
SaveExploits1References1Affected Software1
osv_cve
osv_cve
•added 2017/10/29 5:29 p.m.•53 views

CVE-2017-16000

SQL injection vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the graph parameter to module/capacityperlabel/index.php...

7.2CVSS8.3AI score0.01754EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2017/10/27 7:29 p.m.•20 views

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

7.2CVSS8.3AI score
SaveExploits0References2
Prion
Prion
•added 2017/10/27 7:29 p.m.•28 views

Sql injection

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

6.5CVSS7.3AI score0.02279EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2017/10/27 7:29 p.m.•23 views

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

7.2CVSS7.3AI score0.02279EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2017/10/27 7:00 p.m.•35 views

CVE-2017-15933

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the host parameter to module/capacityperdevice/index.php...

7.3AI score0.02279EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2017/10/26 8:00 p.m.•72 views

CVE-2014-2023

Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to 1 unsubscribeforum.php or 2 unsubscribetopic.php in mobiquo/functions/...

10AI score0.04145EPSS
SaveExploits6References5
NVD
NVD
•added 2017/10/26 5:29 a.m.•32 views

CVE-2017-15907

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

9.8CVSS10AI score0.01336EPSS
SaveExploits1References1
Prion
Prion
•added 2017/10/26 5:29 a.m.•28 views

Sql injection

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

7.5CVSS9.9AI score0.01336EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2017/10/26 5:00 a.m.•40 views

CVE-2017-15907

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

10AI score0.01336EPSS
SaveExploits1References1
CVE
CVE
•added 2017/10/26 5:00 a.m.•79 views

CVE-2017-15907

CVE-2017-15907: SQL injection in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php. Affected: phpCollab (2.5.1 and earlier). Root cause: unsafely embedded user input in SQL query construction. Impact: potential data...

9.8CVSS8.6AI score0.01336EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2017/10/26 12:00 a.m.•6 views

PT-2017-5838

Name of the Vulnerable Software and Affected Versions: vBulletin Tapatalk plugin versions 4.9.0 and earlier vBulletin Tapatalk plugin versions 5.x through 5.2.1 Description: The issue allows remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to specific endpoints,...

9.8CVSS0.04145EPSS
SaveExploits6References7
Prion
Prion
•added 2017/10/24 10:29 p.m.•29 views

Sql injection

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the groupname parameter to module/admingroup/addmodifygroup.php for insertgroup and updategroup...

6.5CVSS7.3AI score0.01941EPSS
SaveExploits1References2Affected Software1
osv_cve
osv_cve
•added 2017/10/24 10:29 p.m.•25 views

CVE-2017-15880

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the groupname parameter to module/admingroup/addmodifygroup.php for insertgroup and updategroup...

7.2CVSS8.3AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2017/10/24 10:00 p.m.•40 views

CVE-2017-15880

SQL injection vulnerability vulnerability in the EyesOfNetwork web interface aka eonweb 5.1-0 allows remote authenticated administrators to execute arbitrary SQL commands via the groupname parameter to module/admingroup/addmodifygroup.php for insertgroup and updategroup...

7.8AI score0.01941EPSS
SaveExploits1References2
Rows per page
Query Builder