Lucene search
K

9 matches found

CNNVD
CNNVD
added 2022/01/31 12:0 a.m.3 views

Elite Graphix Elite Cms SQL注入漏洞

Elite Graphix Elite Cms is a Web Content Management written in Php language by Elite Graphix India. A platform for storing and organizing information and documents. Elite Graphix Elite Cms suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL...

9.8CVSS8AI score0.04944EPSS
Exploits4References8
CNVD
CNVD
added 2021/04/02 12:0 a.m.5 views

Sourcecodester Simple College Website SQL Injection Vulnerability (CNVD-2021-95934)

Sourcecodester Simple College Website is a content management system from Sourcecodester. Sourcecodester Simple College Website suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in database-based applications, which can be exploit...

9.8CVSS7.8AI score0.04247EPSS
Exploits1References1
CNVD
CNVD
added 2021/03/19 12:0 a.m.7 views

HGiga MailSherlock SQL Injection Vulnerability (CNVD-2021-25618)

Hgiga MailSherlock is a set of enterprise mail audit system from Henderson Hgiga, China. HGiga MailSherlock suffers from a SQL injection vulnerability, which stems from the lack of validation of externally entered SQL statements in database-based applications, and can be exploited by an attacker ...

9.8CVSS7.9AI score0.00444EPSS
Exploits0References1
CNVD
CNVD
added 2021/02/24 12:0 a.m.7 views

PHPSHE SQL Injection Vulnerability (CNVD-2021-14156)

PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in PHPSHE, which stems from the lack of validati...

8.8CVSS7.8AI score0.00561EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/02/16 12:0 a.m.2 views

PNPSCADA SQL Injection Vulnerability

A SQL injection vulnerability exists in PNPSCADA that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...

9.8CVSS7.5AI score0.00419EPSS
Exploits1References3
CNVD
CNVD
added 2020/07/08 12:0 a.m.6 views

ConnectWise Automate SQL Injection Vulnerability

ConnectWise Automate is a cloud-based, local IT automation solution from ConnectWise USA. The product supports content management, file sharing, IT asset tracking and management, and more. A SQL injection vulnerability exists in Connectwise Automate versions prior to 2020.7 and prior to 2019.12...

7.5CVSS7.7AI score0.00257EPSS
Exploits0References1
CNVD
CNVD
added 2020/03/31 12:0 a.m.3 views

odata4j sql injection vulnerability (CNVD-2020-24024)

odata4j is a new open source toolkit. A SQL injection vulnerability exists in odata4j version 0.7.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit the vulnerability to execute illegal SQL commands...

9.8CVSS9.8AI score0.00281EPSS
Exploits0
CNVD
CNVD
added 2019/08/13 12:0 a.m.0 views

imcat SQL Injection Vulnerability

imcat is a PHP-based open source website building system . SQL injection vulnerability exists in imcat version 4.9, the vulnerability stems from the lack of validation of external input SQL statements in database-based applications, which can be exploited by attackers to execute illegal SQL...

9.8CVSS8.2AI score0.00264EPSS
Exploits1References1
exploitpack
exploitpack
added 2000/05/25 12:0 a.m.18 views

Omnis Studio 2.4 - Weak Database Field Encryption

Omnis Studio 2.4 - Weak Database Field Encryption source: https://www.securityfocus.com/bid/1255/info Omnis Studio 2.4 is a development tool for creating database applications. The tool gives developers the option to encrypt database entries. However, the encryption scheme used is weak and easily...

7.4AI score
Exploits0
Rows per page
Query Builder