Lucene search
+L

11 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 11:28 a.m.•15 views

CVE-2021-27950

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

8.8CVSS8.2AI score0.01456EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/06 12:00 a.m.•20 views

Sita AzurCMS SQL Injection Vulnerability

Sita AzurCMS is a telecommuting solution from Sita Luxembourg. for telecommuting, clustered storage and virtualization. Sita AzurCMS suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in azurWebEngine in Sita AzurCMS in 1.2.3.12. An attacker can exploit...

8.8CVSS8.3AI score0.01456EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/07/02 3:15 p.m.•18 views

CVE-2021-27950

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

8.8CVSS6AI score0.01456EPSS
SaveExploits1References4
NVD
NVD
•added 2021/07/02 3:15 p.m.•17 views

CVE-2021-27950

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

8.8CVSS0.01456EPSS
SaveExploits1References4
Prion
Prion
•added 2021/07/02 3:15 p.m.•29 views

Sql injection

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

6.5CVSS9AI score0.01456EPSS
SaveExploits1References4Affected Software1
attackerkb
attackerkb
•added 2021/07/02 3:15 p.m.•7 views

CVE-2021-27950

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

8.8CVSS8.6AI score0.01456EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2021/07/02 2:26 p.m.•25 views

CVE-2021-27950

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

9.2AI score0.01456EPSS
SaveExploits1References4
CVE
CVE
•added 2021/07/02 2:26 p.m.•61 views

CVE-2021-27950

CVE-2021-27950 affects Sita AzurCMS (AzurWebEngine/eShop)

8.8CVSS8.9AI score0.01456EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2021/07/02 12:00 a.m.•15 views

Sita AzurCMS SQL注入漏洞

Sita AzurCMS is a telecommuting solution from Sita Luxembourg. for telecommuting, clustered storage and virtualization. Sita AzurCMS suffers from a SQL injection vulnerability that originates from a SQL injection vulnerability in azurWebEngine in Sita AzurCMS in 1.2.3.12. An attacker can exploit...

8.8CVSS6.4AI score0.01456EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2021/07/02 12:00 a.m.•4 views

PT-2021-17690

Name of the Vulnerable Software and Affected Versions: Sita AzurCMS versions through 1.2.3.12 Description: A SQL injection issue allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to "mesdocs.ajax.php" in azurWebEngine/eShop. By default, the query is executed ...

8.8CVSS0.01456EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/02 12:00 a.m.•6 views

CVE-2021-27950: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in azurWebEngine in Sita AzurCMS through 1.2.3.12 allows an authenticated attacker to execute arbitrary SQL commands via the id parameter to mesdocs.ajax.php in azurWebEngine/eShop. By default, the query is executed as DBA...

8.8CVSS6.3AI score0.01456EPSS
SaveExploits1References2
Rows per page
Query Builder