Lucene search
K

1129 matches found

CNVD
CNVD
added 2022/07/18 12:0 a.m.25 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77045)

Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...

8.8CVSS5.2AI score0.00257EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/15 12:0 a.m.18 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77046)

Product Show Room Site is a product showroom website from Carlo Montero's personal developer. Product Show Room Site v1.0 is vulnerable to SQL injection, which originates from a SQL injection in the /psrs/classes/Master.php?f=deleteproduct The vulnerability is caused by SQL injection of the id...

7.2CVSS5.6AI score0.00274EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.1 views

Stock Management System SQL注入漏洞

Stock Management System is an inventory management system. A SQL injection vulnerability exists in Stock Management System v1.0, which originates from a lack of validation of the id parameter in /isms/admin/stocks/viewstock.php against an externally entered SQL statement. An attacker can exploit...

9.8CVSS6.1AI score0.00251EPSS
Exploits1References2
OSV
OSV
added 2022/07/01 6:15 p.m.1 views

CVE-2022-22367

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008...

5.5CVSS5.7AI score0.00018EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/07/01 12:0 a.m.2 views

IBM UrbanCode Deploy 安全漏洞

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM Corporation in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology to automate the deployment of complex applications in...

5.5CVSS5.6AI score0.00018EPSS
Exploits0References4
CNVD
CNVD
added 2022/06/30 12:0 a.m.30 views

Library Management System SQL Injection Vulnerability (CNVD-2022-61297)

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

6.5CVSS3.3AI score0.00365EPSS
Exploits1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/30 12:0 a.m.3 views

CVE-2022-22367

IBM UrbanCode Deploy UCD 6.2.7.15, 7.0.5.10, 7.1.2.6, and 7.2.2.1 could disclose sensitive database information to a local user in plain text. IBM X-Force ID: 221008...

5.5CVSS5.8AI score0.00018EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2022/06/28 12:0 a.m.10 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48400)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/crimes/viewcrime.php in the id parameter in /pms/admin/crimes/viewcrime.php is missing the S...

8.8CVSS3.1AI score0.00257EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/28 12:0 a.m.11 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48399)

Prison Management System is a prison management system from Carlo Montero's personal developer. v1.0 of Prison Management System is vulnerable to SQL injection, which originates from the id in /pms/admin/cells/viewcell.php in the application. parameter in /pms/admin/cells/viewcell.php lacks a...

8.8CVSS3AI score0.00257EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/06/28 12:0 a.m.0 views

Advantech iView SQL注入漏洞

Advantech iView, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in versions prior to Advantech iView 5.7.04.6469, which results from the use of special elements in SQL commands that are not...

7.5CVSS5.9AI score0.00211EPSS
Exploits0References5
CNVD
CNVD
added 2022/06/28 12:0 a.m.15 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48396)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates from the application /pms/admin/user/manageuser.php in the id parameter in /pms/admin/user/manageuser.php is missing the S...

7.2CVSS3.1AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/28 12:0 a.m.13 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48390)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/cells/managecell.php in the id parameter in /pms/admin/cells/managecell.php is missing the S...

8.8CVSS3.1AI score0.00257EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/28 12:0 a.m.10 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48403)

Prison Management System is a prison management system from Carlo Montero's personal developer. prison Management System v1.0 is vulnerable to SQL injection, which originates in the application /pms/admin/visits/viewvisit.php in the id parameter in /pms/admin/visits/viewvisit.php is missing the S...

8.8CVSS3.1AI score0.00257EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/27 12:0 a.m.24 views

74cmsSE SQL Injection Vulnerability (CNVD-2022-61440)

74cmsSE is a free open source professional recruitment system based on PHP MYSQL. 74cmsSE is vulnerable to SQL injection, which results from the lack of validation of external input SQL statements in the /freelance/resumelist keyword parameter. An attacker could use this vulnerability to execute...

7.5CVSS2.7AI score0.00246EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/21 12:0 a.m.35 views

VoIPmonitor SQL Injection Vulnerability (CNVD-2022-66404)

VoIPmonitor is an open source network packet sniffer from the VoIPmonitor team. With a commercial front-end for SIP RTP RTCP SKINNY SCCP MGCP WebRTC VoIP protocol running on Linux, VoIPmonitor version 24.61 is vulnerable to a SQL injection vulnerability caused by missing filter escaping for SQL...

7.5CVSS3.3AI score0.00732EPSS
Exploits1Affected Software1
CNVD
CNVD
added 2022/06/21 12:0 a.m.26 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55713)

Online Ordering System is a multi-store ordering system that can be used by any small business. an SQL injection vulnerability exists in Online Ordering System version v2.3.2, which originates from /ordering/admin/store/index.php?view=edit&id= Lack of validation of external input SQL statements c...

9.8CVSS4.4AI score0.00264EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.15 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48750)

Sourcecodester Hospital Patient Records Management System is a web-based application that provides hospitals with an automated platform to store and manage their patient records. sourcecodester Hospital Patient Records Management System is vulnerable to a SQL injection vulnerability that originat...

7.2CVSS2.1AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.16 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48745)

Sourcecodester Hospital Patient Records Management System is a Web-based application that provides hospitals with an automated platform to store and manage their patient records. Management System is vulnerable to SQL injection, which originates from /hprms/admin/?page=patients/viewpatient&id=pag...

7.2CVSS2.5AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.128 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48760)

Sourcecodester Hospital Patient Records Management System is a web-based application that provides hospitals with an automated platform to store and manage their patient records. sourcecodester Hospital Patient Records Management System is vulnerable to SQL injection, which originates from...

7.2CVSS2AI score0.00274EPSS
Exploits1References1
CNVD
CNVD
added 2022/06/20 12:0 a.m.104 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-48960)

Product Show Room Site is a product showroom website from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/classes/Master.php?f=deleteinquiry page Lack of validation of external input SQL statements allows...

7.2CVSS5.2AI score0.00274EPSS
Exploits1References1
Rows per page
Query Builder