Lucene search
+L

4001 matches found

CNVD
CNVD
added 2019/03/05 12:00 a.m.3 views

SQL injection vulnerability in Hefei Xinchen website building system

Hefei Xinchen Network Technology Co., Ltd. provides Internet services for a wide range of enterprises. Hefei Xinchen Network Technology Co., Ltd. website building system has SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
zdt
zdt
added 2019/03/02 12:00 a.m.43 views

OOP CMS BLOG 1.0 Cross Site Request Forgery / SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: OOP CMS BLOG 1.0 - SQL Injection Exploit Author: Mr Winst0n Author E-mail: [email protected] Vendor Homepage: http://zsoft.com.bd/ Software Link :...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2019/02/27 12:00 a.m.36 views

XAMPP SQL Injection Vulnerability

XAMPP Apache + MySQL + PHP + PERL is a build XAMPP software station integration package. XAMPP suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

9.8CVSS7.8AI score0.03903EPSS
SaveExploits6References1
CNVD
CNVD
added 2019/02/26 12:00 a.m.9 views

Five Fingers CMS v4.1.0 SQL Injection Vulnerability in Frontend

Five Fingers CMS is a high-performance open source content management system that supports LNAMP architecture. Five Fingers CMS v4.1.0 SQL injection vulnerability exists in the front-end , an attacker can exploit the vulnerability to obtain sensitive information in the database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2019/02/21 12:00 a.m.3 views

SQL Injection Vulnerability in EmpireCMS Se***.php Page

EmpireCMS Empire Website Management System is a content management system CMS. An SQL injection vulnerability exists in the EmpireCMS Se.php page, which can be exploited by an attacker to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/19 12:00 a.m.8 views

SQL Injection Vulnerability in the front-end wa***_mo***.asp file of Eco Times Enterprise Online Bookkeeping Management System

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. SQL injection vulnerability exists in the front-end wamo.asp file of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain sensitive...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/19 12:00 a.m.10 views

SQL injection vulnerability in the front-end xi***_mo***.asp file of the Eco Times Enterprise Online Bookkeeping Management System.

Eco Times Business Online Bookkeeping Management System is a financial online bookkeeping software. There is a SQL injection vulnerability in the ximo.asp file in the frontend of the EcoTimes Enterprise Online Bookkeeping Management System. An attacker can exploit the vulnerability to obtain...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/13 12:00 a.m.8 views

SQL Injection Vulnerability in Penta Campus Network Application System Management Software

PantoSchool.Net is a complete solution for networked learning schools! A SQL injection vulnerability exists in PantoSchool.Net Application System Management Software. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/10 12:00 a.m.5 views

SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06239)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
VulnCheck KEV
VulnCheck KEV
added 2019/02/08 12:00 a.m.9 views

VulnCheck KEV: CVE-2017-18362

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database...

9.8CVSS7.3AI score0.8682EPSS
SaveExploits1References1
Prion
Prion
added 2019/02/05 6:29 a.m.14 views

Sql injection

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

7.5CVSS9.8AI score0.8682EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2019/02/05 5:00 a.m.41 views

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

9.9AI score0.8682EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2019/02/05 12:00 a.m.23 views

CVE-2017-18362

ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all...

9.8CVSS4.4AI score0.8682EPSS
SaveIn wildExploits1References4
Positive Technologies
Positive Technologies
added 2019/02/05 12:00 a.m.6 views

PT-2019-6222

Name of the Vulnerable Software and Affected Versions Kaseya VSA versions through 2017 Description The issue allows unauthenticated remote commands, providing full direct access to the Kaseya VSA database. Attackers have exploited this in the wild to download and execute ransomware payloads on al...

10CVSS9.1AI score0.8682EPSS
SaveExploits1References11
CNVD
CNVD
added 2019/02/01 12:00 a.m.5 views

Changsha Tianxin District Binnet Network Technology Service Department's website building system pc***/?classa suffers from SQL injection vulnerability.

Changsha Tianxin District Bin net network technology service department is a focus on small and medium-sized enterprise website set up, for the company, enterprises, individuals to provide more perfect, more efficient services and solutions to a company. Changsha City, Tianxin District, Bin netwo...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/01/29 12:00 a.m.6 views

SQL injection vulnerability in the co***.aspx and de***.aspx files in the frontend of Gallery, a Qixing image & video library.

Qixing Image & Video GalleryGallery is mainly used to store images or videos in the company. SQL injection vulnerability exists in the frontend co.aspx and de.aspx files of the Qixing Image & Video Gallery, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2019/01/25 12:00 a.m.5 views

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Qingdao Business to letter network technology limited company, is a professional engaged in e-commerce, network marketing, software development, IDC and related network value-added services of high-tech specialized companies. There is a SQL injection vulnerability in sh.php, which can be exploite...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/01/25 12:00 a.m.9 views

SQL Injection Vulnerability in Sh***.asp File of Shop7z Online Shopping System Fashion Edition

Shop7z online shopping system is ASP online store platform software, providing comprehensive application services based on Internet solutions. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability, an attacker can exploit the vulnerability to obtain...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2019/01/22 12:00 a.m.14 views

Shop7z Online Shopping System Fashion Edition Frontend Sh***.asp File SQL Injection Vulnerability

Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the front Sh.asp file SQL injection vulnerability...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/01/22 12:00 a.m.7 views

SQL Injection Vulnerability in Showo***.asp File of Shop7z Online Shopping System Fashion Edition

Shop7z online shopping system is to support Alipay, WeChat payment and a variety of commonly used interfaces, computer and cell phone version and APP seamless combination of data as a whole. Shop7z online shopping system fashion version of the foreground Showo.asp file there is a SQL injection...

7.6AI score
SaveExploits0
Rows per page
Query Builder