Lucene search
+L

98 matches found

NVD
NVD
added 2019/04/30 8:29 p.m.26 views

CVE-2019-11623

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...

4.9CVSS5.2AI score0.01222EPSS
SaveExploits1References1
NVD
NVD
added 2019/04/30 8:29 p.m.16 views

CVE-2019-11614

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information...

7.5CVSS7.5AI score0.01518EPSS
SaveExploits1References1
NVD
NVD
added 2019/04/30 8:29 p.m.22 views

CVE-2019-11619

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user or a user with permission to manage configuration analytics could exploit the vulnerability to obtain database sensitive...

4.9CVSS5.2AI score0.01222EPSS
SaveExploits1References1
Prion
Prion
added 2019/04/30 8:29 p.m.19 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user or a user with permission to manage configuration analytics could exploit the vulnerability to obtain database sensitive...

4CVSS5.2AI score0.01222EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/04/30 8:29 p.m.17 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user or a user with permission to manage emailing could exploit the vulnerability to obtain database sensitive information...

4CVSS5.3AI score0.01222EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/04/30 8:29 p.m.13 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

4CVSS5.2AI score0.01222EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/04/30 8:29 p.m.20 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user or a user with permission to manage network configuration could exploit the vulnerability to obtain database sensitive...

4CVSS5.3AI score0.01222EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/04/30 8:29 p.m.18 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...

4CVSS5.2AI score0.01222EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2019/04/30 8:29 p.m.20 views

Sql injection

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information...

5CVSS7.5AI score0.01518EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2019/04/30 7:41 p.m.25 views

CVE-2019-11625

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/emailingRequest.php. A remote background administrator privilege user or a user with permission to manage emailing could exploit the vulnerability to obtain database sensitive information...

5.2AI score0.01222EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/04/30 7:41 p.m.33 views

CVE-2019-11623

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=siteweb. A remote background administrator privilege user or a user with permission to manage configuration siteweb could exploit the vulnerability to obtain database sensitive...

5.2AI score0.01222EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/04/30 7:41 p.m.25 views

CVE-2019-11622

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/modulecategoryRequest.php. A remote background administrator privilege user or a user with permission to manage modulecategory could exploit the vulnerability to obtain database sensitive information via...

5.2AI score0.01222EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/04/30 7:41 p.m.23 views

CVE-2019-11621

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=network. A remote background administrator privilege user or a user with permission to manage network configuration could exploit the vulnerability to obtain database sensitive...

5.2AI score0.01222EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/04/30 7:40 p.m.27 views

CVE-2019-11619

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/requests/user/configurationRequest.php when action=analytics. A remote background administrator privilege user or a user with permission to manage configuration analytics could exploit the vulnerability to obtain database sensitive...

5.2AI score0.01222EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2019/04/30 7:40 p.m.18 views

CVE-2019-11614

doorGets 7.0 has a SQL injection vulnerability in /doorgets/app/views/ajax/commentView.php. A remote unauthorized attacker could exploit the vulnerability to obtain database sensitive information...

7.5AI score0.01518EPSS
SaveExploits1References1
CVE
CVE
added 2019/04/30 7:40 p.m.44 views

CVE-2019-11614

CVE-2019-11614 refers to a SQL injection in doorGets 7.0, specifically in /doorgets/app/views/ajax/commentView.php. The connected documents confirm a remote, unauthorized attacker could extract sensitive information from the database. The vulnerability is due to improper handling of user-controll...

7.5CVSS7.5AI score0.01518EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2018/04/12 12:0 a.m.3 views

Xuzhou Xunbang Technology Co., Ltd. website construction system has SQL injection vulnerabilities

Xuzhou Xunbang Technology Co., Ltd. is engaged in enterprise website design and production, shopping mall website production, marketing website production, mobile APP development, WeChat public platform, cell phone / micro-site production, Baidu optimization and promotion, 360 search promotion,...

7.8AI score
SaveExploits0
Cvelist
Cvelist
added 2005/09/02 4:0 a.m.19 views

CVE-2005-2785

cosmoshop 8.10.78 and earlier stores passwords in plaintext in the database, which allows local users to obtain sensitive information...

6.1AI score0.00332EPSS
SaveExploits0References3
Rows per page
Query Builder