Lucene search
+L

3999 matches found

CNVD
CNVD
added 2021/03/24 12:0 a.m.7 views

SQL Injection Vulnerability in Ke361 Backend Me***.cl***.php

Ke361 is an open source Taobao system, based on the latest ThinkPHP3.2 version of the development, to provide a more convenient and secure WEB application development experience, the Taobao system adopts a new architectural design and namespace mechanism, the integration of modular, driven and...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2021/03/19 12:0 a.m.42 views

Wordpress WP Google Map SQL Injection Vulnerability

Wordpress WP Google Map is an application plugin for Wordpress. Provides a way to quickly and easily add customized Google maps or store locators to WordPress posts and, or pages. A security vulnerability exists in WordPress plugin WP Google Map Plugin versions prior to 4.1.5, which originates in...

7.2CVSS7.6AI score0.01416EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/03/19 12:0 a.m.4 views

SQL Injection Vulnerability in OurPHP (CNVD-2021-22605)

OurPHP is a PHP MySQL-based development of W3C-compliant site-building system. OurPHP suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
NVD
NVD
added 2021/03/18 3:15 p.m.23 views

CVE-2021-26935

In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...

7.5CVSS0.02318EPSS
SaveExploits1References2
Prion
Prion
added 2021/03/18 3:15 p.m.19 views

Sql injection

In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...

5CVSS8AI score0.02318EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2021/03/18 2:6 p.m.27 views

CVE-2021-26935

In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...

8.2AI score0.02318EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/03/18 12:0 a.m.7 views

Envato WoWonder SQL注入漏洞

Envato WoWonder is an application from the Australian company Envato. It provides a PHP social networking script. A security vulnerability exists in WoWonder 3.1, which can be exploited by remote attackers to gain access to a database via request .php...

7.5CVSS7.5AI score0.02318EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/03/18 12:0 a.m.5 views

Harbin Qixun Technology Co., Ltd. website building system has SQL injection vulnerabilities

Harbin Qixun Technology Co., Ltd. is a focus on small and medium-sized enterprises network marketing outsourcing Internet enterprises, Qixun Technology to provide customers with "stable, safe, high-speed" Internet-based products and online service solutions. Harbin Qixun Technology Co., Ltd...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2021/03/17 12:0 a.m.6 views

SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24438)

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2021/03/17 12:0 a.m.6 views

SQL injection vulnerability exists in the open-source version of the UX365 web site navigation (CNVD-2021-24439)

Youkai 365 Web site navigation open source version is based on PHP + MYSQL development and construction of open source Web site catalog management system. Uke365 Web site navigation open source version of the existence of SQL injection vulnerability . Attackers can exploit the vulnerability to...

7.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/03/17 12:0 a.m.230 views

WoWonder Social Network Platform 3.1 SQL Injection

Exploit Title: WoWonder Social Network Platform 3.1 - 'eventid' SQL Injection Date: 16.03.2021 Exploit Author: securityforeveryone.com Author Mail: helloATsecurityforeveryone.com Vendor Homepage: https://www.wowonder.com/ Software Link:...

SaveExploits0
zdt
zdt
added 2021/03/17 12:0 a.m.24 views

WoWonder Social Network Platform 3.1 - (event_id) SQL Injection Vulnerability

Exploit Title: WoWonder Social Network Platform 3.1 - 'eventid' SQL Injection Vendor Homepage: https://www.wowonder.com/ Software Link: https://codecanyon.net/item/wowonder-the-ultimate-php-social-network-platform/13785302 Version: 3.1 Tested on: Linux/Windows DESCRIPTION In WoWonder 3.1, remote...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2021/03/16 12:0 a.m.3 views

SQL injection vulnerability in Myeye backend (CNVD-2021-24444)

Myeye is a monitoring and control system. A SQL injection vulnerability exists in the backend of Myeye. An attacker can exploit the vulnerability to obtain sensitive database information...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2021/03/15 12:0 a.m.6 views

SQL injection vulnerability in the backend of Tongda oa (CNVD-2021-22798)

Tongda OA Office Anywhere Network Intelligent Office System is a collaborative office automation software independently developed by Beijing Tongda Science and Technology Co., Ltd. and China's enterprise management practices combined with the formation of a comprehensive management office platfor...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2021/03/10 12:0 a.m.3 views

Zhengzhou Wolong website builder system has SQL injection vulnerability

Zhengzhou Wolong Software Development Co., Ltd, was registered in Henan Province on 2013-03-11, belongs to the information transmission, software and information technology services industry, the main industry is software and information technology services industry, the service field is computer...

7.7AI score
SaveExploits0
OSV
OSV
added 2021/03/05 5:15 p.m.10 views

CVE-2021-26966

A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform versions: Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacke...

6.5CVSS6.7AI score0.01128EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/04 1:15 p.m.63 views

CVE-2020-24913

A SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request...

9.8CVSS0.40621EPSS
SaveExploits5References5
Prion
Prion
added 2021/03/04 1:15 p.m.21 views

Sql injection

A SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request...

7.5CVSS9.6AI score0.40621EPSS
SaveExploits5References5Affected Software1
Cvelist
Cvelist
added 2021/03/04 12:31 p.m.85 views

CVE-2020-24913

A SQL injection vulnerability in qcubed all versions including 3.1.1 in profile.php via the strQuery parameter allows an unauthenticated attacker to access the database by injecting SQL code via a crafted POST request...

9.7AI score0.40621EPSS
SaveExploits5References5
CNVD
CNVD
added 2021/03/04 12:0 a.m.8 views

SeaCMS suffers from SQL injection vulnerability (CNVD-2021-17447)

SeaCMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SeaCMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
Rows per page
Query Builder