Lucene search
+L

27 matches found

CNNVD
CNNVD
•added 2021/02/11 12:00 a.m.•17 views

SolarWinds Network Performance Monitor SQL Injection Vulnerability

A SQL injection vulnerability exists in SolarWinds Network Performance Monitor that stems from a database-based application that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands...

9CVSS7.5AI score0.0527EPSS
SaveExploits0References2
Prion
Prion
•added 2019/08/01 5:15 p.m.•23 views

Design/Logic Flaw

cPanel before 68.0.27 does not validate database and dbuser names during renames SEC-321...

4CVSS4.8AI score0.00554EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2019/08/01 4:06 p.m.•56 views

CVE-2018-20937

CVE-2018-20937 affects cPanel before 68.0.27, where database and dbuser names are not validated during rename operations (SEC-321). Multiple connected records (RH, CNVD, NVD, CVE lists) corroborate the same description. The vulnerability stems from insufficient validation in the rename process, p...

4.3CVSS4.7AI score0.00554EPSS
SaveExploits0References1Affected Software1
exploitpack
exploitpack
•added 2011/07/01 12:00 a.m.•31 views

WordPress 3.1.3 - SQL Injection

WordPress 3.1.3 - SQL Injection SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple SQL Injection Vulnerabilities product: WordPress vulnerable version: 3.1.3/3.2-RC1 and probably earlier versions fixed version:...

SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2011/04/28 12:00 a.m.•87 views

Cisco Unified CallManager xmldirectorylist.jsp SQL Injection Vulnerability

This vulnerability allows remote attackers to inject arbitrary SQL into the backend database on vulnerable installations of Cisco Unified CM. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Call Manager component. The system exposes an Apache...

6.4CVSS3.2AI score0.24822EPSS
SaveExploits1References1
Packet Storm
Packet Storm
•added 2008/02/27 12:00 a.m.•49 views

authentix-xss.txt

Description: "Form-based or 100% cookie-free "Basic Authentication" website protection while keeping your NT Users Names and Passwords private. Protect all files, not just ASP pages. Validate against internal database, text file or external ODBC datasource." - www.flicks.com Summary: The Authenti...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/07/24 12:00 a.m.•63 views

Secunia Research: VisNetic Mail Server Two File Inclusion Vulnerabilities

====================================================================== Secunia Research 17/07/2006 - VisNetic Mail Server Two File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

5CVSS0.5AI score0.05661EPSS
SaveExploits2
Rows per page
Query Builder