Lucene search
+L

6488 matches found

CNNVD
CNNVD
added 2022/04/21 12:0 a.m.7 views

Purchase Order Management System SQL注入漏洞

Purchase Order Management System is a purchase order management system. Purchase Order Management System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.02581EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.7 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...

8.8CVSS6AI score0.01095EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.9 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/siteoptions.php & social=remove & sid= where the sid parameter lacks validation for externa...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.10 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the find= parameter of...

9.8CVSS6.1AI score0.01269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.12 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from /admin.php?id=siteoptions&social=display&value=0&sid=midsid parameter missing validation of external...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.9 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/uesrs.php & action=type & userrole=Admin & userid= where the userid parameter lacks...

9.8CVSS6.2AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.6 views

Simple Real Estate Portal System SQL注入漏洞

Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. Simple Real Estate Portal System v1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.8 views

Student Grading System SQL注入漏洞

Student Grading System is a student grading system from Carlo Montero's personal developer. v1.0 of Student Grading System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.8 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the setid parameter in...

9.8CVSS6.2AI score0.01269EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.8 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminposition delete.php lacks validation for external...

8.8CVSS6AI score0.01095EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.8 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvanceedit.php lacks validation for external...

8.8CVSS6AI score0.01095EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.10 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 is vulnerable to SQL injection, which originates from the lack of validation of external input SQL statements in the roleid parameter in /admin/pagerole.php...

9.8CVSS6.1AI score0.0122EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/04/21 12:0 a.m.10 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability, which originates from /admin.php?id=siteoptions&social=edit&sid=insid parameter missing validation of external input...

9.8CVSS6.2AI score0.00899EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/04/20 12:0 a.m.46 views

ResearchGate Automatic Question Paper Generator System SQL Injection Vulnerability

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

7.5CVSS9.8AI score0.01151EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2022/04/18 12:0 a.m.7 views

ResearchGate Automatic Question Paper Generator System SQL注入漏洞

ResearchGate Automatic Question Paper Generator System an automated question paper generation system. researchGate Automatic Question Paper Generator System version v1.0 is vulnerable to a SQL injection vulnerability, which stems from The id parameter in the GET request may lead to a time-based S...

9.8CVSS6.1AI score0.01151EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2022/04/16 4:30 a.m.48 views

GitHub Says Hackers Breached Dozens of Organizations Using Stolen OAuth Access Tokens

Cloud-based repository hosting service GitHub on Friday revealed that it discovered evidence of an unnamed adversary capitalizing on stolen OAuth user tokens to unauthorizedly download private data from several organizations. "An attacker abused stolen OAuth user tokens issued to two third-party...

1AI score
SaveExploits0
CNNVD
CNNVD
added 2022/04/15 12:0 a.m.5 views

Wecul Nyron SQL注入漏洞

A SQL injection vulnerability exists in Wecul Nyron version 1.0, which stems from a lack of validation of externally entered SQL statements in thes1 parameter of Nyron/Library/Catalog/winlibsrch.aspx. validation of external input SQL statements. An attacker could use this vulnerability to execute...

9.8CVSS6AI score0.01534EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/04/14 10:13 a.m.22 views

SQL Injection

pimcore/pimcore is vulnerable to SQL injection. Direct use of property parameter without secure handling allows an attacker to inject malicious SQL script via the parameter to steal the data...

7.5CVSS3AI score0.05455EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/04/14 12:0 a.m.8 views

McAfee Agent SQL注入漏洞

Mcafee McAfee Agent MA is a client component from Mcafee that provides secure communication between ePolicy Orchestrator antivirus management platform and the managed products.A SQL injection vulnerability exists in versions prior to McAfee Agent 5.7.6, which stems from the application Lack of...

8.4CVSS7.4AI score0.00936EPSS
SaveExploits0References3
ThreatPost
ThreatPost
added 2022/04/13 3:1 p.m.58 views

Feds Shut Down RaidForums Hacking Marketplace

U.S. law enforcement has shut down one of the largest cybercriminal online forums in the world and revealed the charges its Portuguese founder will face in federal court. However, the takedown is likely to only be a temporary blow to hackers, who will find other ways of buying and selling data...

7AI score
SaveExploits0References5
Rows per page
Query Builder