Lucene search
+L

4 matches found

Packet Storm
Packet Storm
added 2019/06/18 12:0 a.m.190 views

Sahi Pro 8.x SQL Injection

Exploit Title: Sahi pro :/s/dyn/pro/DBReports?sql=SELECT DISTINCT memoryused AS ROWSTATUS, SCRIPTREPORTS.SCRIPTREPORTID,SCRIPTREPORTS.SCRIPTNAME,SUITEREPORTS. FROM SUITEREPORTS,SCRIPTREPORTS...

0.7AI score0.18539EPSS
SaveExploits5
exploitpack
exploitpack
added 2019/06/18 12:0 a.m.38 views

Sahi pro 8.x - SQL Injection

Sahi pro 8.x - SQL Injection Exploit Title: Sahi pro :/s/dyn/pro/DBReports?sql=SELECT DISTINCT memoryused AS ROWSTATUS, SCRIPTREPORTS.SCRIPTREPORTID,SCRIPTREPORTS.SCRIPTNAME,SUITEREPORTS. FROM SUITEREPORTS,SCRIPTREPORTS...

7.5CVSS0.7AI score0.18539EPSS
SaveExploits5
zdt
zdt
added 2019/06/18 12:0 a.m.214 views

Sahi pro 8.x - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Sahi pro :/s/dyn/pro/DBReports?sql=SELECT DISTINCT memoryused AS ROWSTATUS, SCRIPTREPORTS.SCRIPTREPORTID,SCRIPTREPORTS.SCRIPTNAME,SUITEREPORTS. FROM SUITEREPORTS,SCRIPTREPORTS 0day.today 2019-06-18...

0.4AI score0.18539EPSS
SaveExploits5
CVE
CVE
added 2019/06/17 1:31 p.m.75 views

CVE-2018-20469

CVE-2018-20469 affects Tyto Sahi Pro (through 7.x.x and 8.0.0). The web reports module contains a parameter vulnerable to h2 SQL injection, enabling arbitrary SQL queries and execution of h2 system functions. Exploitation activity is evidenced by public exploit references (exploit DB, PacketStorm...

9.8CVSS9.7AI score0.18539EPSS
SaveExploits5References2Affected Software1
Rows per page
Query Builder