Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2025/06/12 10:13 a.m.2 views

CVE-2025-40656

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

9.3CVSS7.4AI score0.00241EPSS
Exploits0References1
NVD
NVD
added 2025/06/10 10:15 a.m.6 views

CVE-2025-40656

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

9.8CVSS0.00241EPSS
Exploits0References1
OSV
OSV
added 2025/06/10 10:15 a.m.2 views

CVE-2025-40654

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the name and cod parameters in /antbuspre.asp...

9.8CVSS5.7AI score
Exploits0References1
Cvelist
Cvelist
added 2025/06/10 10:3 a.m.7 views

CVE-2025-40656 SQL injection vulnerability in DM Corporative CMS

A SQL injection vulnerability has been found in DM Corporative CMS. This vulnerability allows an attacker to retrieve, create, update and delete databases through the cod parameter in /administer/node-selection/data.asp...

9.3CVSS0.00241EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/10 12:0 a.m.1 views

Dmacroweb DM Corporative CMS SQL注入漏洞

Dmacroweb DM Corporative CMS is a content management system from the Spanish company Dmacroweb. Dmacroweb DM Corporative CMS suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cod in the file...

9.8CVSS7.6AI score0.00241EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:28 p.m.4 views

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

9.8CVSS8.3AI score0.00264EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/02/23 12:0 a.m.1 views

Harpia DiagSystem 安全漏洞

Harpia DiagSystem is a software from Harpia for managing diagnostic clinics. A security vulnerability exists in Harpia DiagSystem version 12, which stems from an improperly controlled issue where the cod and codexame parameters in the /diagsystem/PACS/atualatendimentojpeg.php location contain a...

5.3CVSS4.9AI score0.00025EPSS
Exploits0References5
NVD
NVD
added 2022/10/13 11:15 p.m.6 views

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

9.8CVSS0.00264EPSS
Exploits1References1
OSV
OSV
added 2022/10/13 11:15 p.m.0 views

CVE-2022-41390

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

9.8CVSS5.8AI score
Exploits0References1
Prion
Prion
added 2022/10/13 11:15 p.m.6 views

Sql injection

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at download.php...

7.5CVSS9.8AI score0.00264EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.4 views

CVE-2022-41391

OcoMon v4.0 was discovered to contain a SQL injection vulnerability via the cod parameter at showImg.php...

9.9AI score0.00264EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/10/13 12:0 a.m.3 views

OcoMon SQL注入漏洞

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. An SQL injection vulnerability exists in OcoMon version v4.0, which stems from the cod parameter in showImg.php being vulnerabl...

9.8CVSS8.5AI score0.00264EPSS
Exploits1References2
CNVD
CNVD
added 2018/04/24 12:0 a.m.1 views

Adaltech G-Ticket SQL Injection Vulnerability

Adaltech G-Ticket is a ticket validation system. A SQL injection vulnerability exists in Adaltech G-Ticket version 70 EME104. A remote attacker can exploit this vulnerability by sending the 'evecod' parameter to the mobile-loja/mensagem.asp file to execute SQL commands...

9.8CVSS8.3AI score0.0025EPSS
Exploits1References1
OSV
OSV
added 2018/04/21 7:29 p.m.0 views

CVE-2018-10284

Adaltech G-Ticket v70 EME104 has SQL Injection via the mobile-loja/mensagem.asp evecod parameter...

9.8CVSS5.8AI score0.0025EPSS
Exploits1References1
Rows per page
Query Builder