Lucene search
+L

6525 matches found

CNNVD
CNNVD
added 2022/04/21 12:00 a.m.13 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the setid parameter in...

9.8CVSS6.2AI score0.01269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.12 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from the lack of validation of external input SQL statements in the roleid parameter in /admin/pagerole.php...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.9 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvanceedit.php lacks validation for external...

8.8CVSS6AI score0.01095EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.10 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminposition delete.php lacks validation for external...

8.8CVSS6AI score0.01095EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.11 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from /admin.php?id=siteoptions&social=edit&sid=insid parameter missing validation of external input...

9.8CVSS6.2AI score0.00921EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.14 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=siteoptions&social=display&value=0&sid=midsid parameter missing validation of external...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.12 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the find= parameter of...

9.8CVSS6.1AI score0.01269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:00 a.m.14 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=type & userrole=Admin & userid= where the userid parameter lacks...

9.8CVSS6.2AI score0.0122EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/04/20 12:00 a.m.53 views

ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

7.5CVSS9.8AI score0.01179EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/04/18 12:00 a.m.12 views

ResearchGate Automatic Question Paper Generator System SQL注入漏洞

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

9.8CVSS6.1AI score0.01179EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/04/16 4:30 a.m.50 views

GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens

Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. "An attacker abused stolen OAuth user tokens issued to two third-party...

1AI score
SaveExploits0
CNNVD
CNNVD
added 2022/04/15 12:00 a.m.9 views

Wecul Nyron SQL注入漏洞

A SQL injection vulnerability exists in Wecul Nyron version 1.0, which stems from a lack of validation of externally entered SQL statements in thes1 parameter of Nyron/Library/Catalog/winlibsrch.aspx. validation of external input SQL statements. An attacker could use this vulnerability to execute...

9.8CVSS6AI score0.01558EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/04/14 10:13 a.m.23 views

SQL Injection

pimcore/pimcore is vulnerable to SQL injection. Direct use of property parameter without secure handling allows an attacker to inject malicious SQL script via the parameter to steal the data...

7.5CVSS3AI score0.0554EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/04/14 12:00 a.m.10 views

McAfee Agent SQL注入漏洞

Mcafee McAfee Agent MA is a client component from Mcafee that provides secure communication between ePolicy Orchestrator antivirus management platform and the managed products.A SQL injection vulnerability exists in versions prior to McAfee Agent 5.7.6, which stems from the application Lack of...

8.4CVSS7.4AI score0.00996EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/04/13 3:01 p.m.62 views

Feds Shut Down RaidForums Hacking Marketplace

U.S. law enforcement has shut down one of the largest cybercriminal online forums in the world and revealed the charges its Portuguese founder will face in federal court. However, the takedown is likely to only be a temporary blow to hackers, who will find other ways of buying and selling data...

7AI score
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/04/13 10:15 a.m.8 views

CVE-2022-1339

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data...

8.8CVSS7.5AI score0.0554EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/04/13 9:45 a.m.51 views

CVE-2022-1339 SQL injection in ElementController.php in pimcore/pimcore

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data...

8.8CVSS8.1AI score0.0554EPSS
SaveExploits1References2
CVE
CVE
added 2022/04/13 9:45 a.m.134 views

CVE-2022-1339

CVE-2022-1339: Pimcore Pimcore prior to 10.3.5 is affected by SQL injection in ElementController.php, enabling unauthorized data access. Root cause: lack of input validation leading to SQL injection in Pimcore’s ElementController.php. Affected versions are before 10.3.5. Impact: potential data co...

8.8CVSS8AI score0.0554EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2022/04/13 9:45 a.m.25 views

CVE-2022-1339 SQL injection in ElementController.php in pimcore/pimcore

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data...

8.8CVSS8.6AI score
SaveExploits0References4
CNNVD
CNNVD
added 2022/04/13 12:00 a.m.39 views

Pimcore SQL注入漏洞

Pimcore is an open source Web content management platform for creating and managing Web applications from the Austrian company Pimcore. The platform integrates Web content management, e-commerce frameworks and product information management applications.A SQL injection vulnerability exists in...

8.8CVSS8.1AI score0.0554EPSS
SaveExploits1References3
Rows per page
Query Builder