Lucene search
K

3898 matches found

CNVD
CNVD
added 2020/07/07 12:0 a.m.1 views

S-CMS hospital website builder system aj***.php suffers from SQL injection vulnerability

S-CMS hospital station building system is developed by asp+access/mssql, easy to operate, convenient, support PC+mobile+WeChat. S-CMS hospital website builder system aj.php has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/07/07 12:0 a.m.1 views

SQL Injection Vulnerability in cp***_sh***.php of Website Building System of Shanghai Enterprise Torch Enterprise Development Co.

Shanghai Enterprise Torch Enterprise Development Co., Ltd. is a technologically innovative company that provides high-quality Internet application services for enterprise informatization construction. Shanghai Enterprise Torch Enterprise Development Co., Ltd. website building system cpsh.php SQL...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/07/05 12:0 a.m.1 views

SQL Injection Vulnerability in Ab*** Page of Arctic Technology Website Builder System

Arctic Technology is mainly engaged in website construction, network promotion and enterprise WEB application team, is committed to enterprises, individuals, associations and organizations to provide website planning, construction, network maintenance and promotion services. There is a SQL...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/07/04 12:0 a.m.1 views

SQL Injection Vulnerability in Ne*** Page of Arctic Technology Website Builder System

Arctic Technology is mainly engaged in website construction, network promotion and enterprise WEB application team, is committed to enterprises, individuals, associations and organizations to provide website planning, construction, network maintenance and promotion services. SQL injection...

7.7AI score
Exploits0
OSV
OSV
added 2020/07/01 3:15 p.m.2 views

CVE-2020-5899

In NGINX Controller 3.0.0-3.4.0, recovery code required to change a user's password is transmitted and stored in the database in plain text, which allows an attacker who can intercept the database connection or have read access to the database, to request a password reset using the email address ...

7.8CVSS7.2AI score0.00185EPSS
Exploits0References1
CNVD
CNVD
added 2020/06/30 12:0 a.m.1 views

SQL Injection Vulnerability in NetShow CMS Backend

Netspan CMS is a website management system developed by Netspan Technology. SQL injection vulnerability exists in the backend of Nethub CMS, which can be exploited by attackers to obtain sensitive information from the database...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/06/29 12:0 a.m.3 views

Ningbo Yinzhou Ziyi Network Technology Co., Ltd. website system SQL injection vulnerability

Ningbo Yinzhou Ziyi Network Technology Co., Ltd, is a company mainly engaged in web design, software development, advertising services, corporate image planning, etiquette services, exhibition and display services and other projects. Ningbo Yinzhou Ziyi Network Technology Co., Ltd. station buildi...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/06/29 12:0 a.m.2 views

Henan Zhongyu Network Technology Co., Ltd. station building system SQL injection vulnerability

Henan Zhongyu Network Technology Co., Ltd. is a high-tech company that provides informatization and networking solutions for enterprises, government agencies and individuals. Henan Zhongyu Network Technology Co., Ltd. station building system there are SQL injection vulnerabilities, attackers can...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/06/28 12:0 a.m.2 views

SQL injection vulnerability exists in the pr***_lo***.asp page of the website building system of Taian Easou Network Co.

Taian Easou Network Co., Ltd. is mainly engaged in website construction and other businesses. Ltd. building system prlo.asp page SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/06/28 12:0 a.m.1 views

SQL Injection Vulnerability in Eagle Networks Website Building System

Eagle Networks is a well-known Internet company specializing in high-end website construction, brand website design, WeChat public number development, WeChat custom development, QR code system development, website marketing and promotion, and website brand planning in one. A SQL injection...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/06/24 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Suzhou Enterprise Torch Winner Network Technology Co.

Suzhou Enterprise Torch Winner Network Technology Co., Ltd. is mainly engaged in: computer software development, computer systems integration, data processing services; design, production, agency, release: all kinds of domestic advertising; investment consulting, economic information consulting,...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/06/24 12:0 a.m.1 views

SQL Injection Vulnerability in Website Building System of Nanjing Guangtui Network Technology Co.

Nanjing Guangpush Network Technology Co., Ltd referred to as Guangpush Network is a high-tech IT enterprise integrating computer software development, website production, network marketing and informatization service. The company has an extremely passionate, top technology team, composed of a gro...

7.9AI score
Exploits0
CVE
CVE
added 2020/06/22 3:20 p.m.38 views

CVE-2020-4062

In Conjur OSS Helm Chart before 2.0.0, a critical issue leads to installing Conjur’s Postgres database with an open port. An attacker who knows the Postgres IP and port and has access to the Kubernetes cluster can gain full read/write access to the database, escalate privileges, and write policie...

9CVSS9.2AI score0.01411EPSS
Exploits0References2Affected Software1
CNVD
CNVD
added 2020/06/22 12:0 a.m.1 views

TuziCMS v3.0 Ma*** Pr***.cl***.php suffers from SQL injection vulnerability

TuziCMS is an enterprise website management system based on ThinkPHP 3.2 framework. TuziCMS v3.0 Ma Pr.cl.php suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information about the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/06/20 12:0 a.m.2 views

Intelligent Heat Measurement Management System of Acuity Brands (Beijing) Instrumentation Co.

Acres Beijing Instrumentation Co., Ltd. is a high-tech enterprise specializing in the research and development, production, sales and service of intelligent instrumentation. A universal password login vulnerability exists in the Intelligent Heat Measurement Management System of Acres Beijing...

6.9AI score
Exploits0
CNVD
CNVD
added 2020/06/20 12:0 a.m.1 views

SQL injection vulnerability in ne***.asp page of Xinghua Xinwang Information Consulting Service Department's website builder system

Xinghua Xinwang Information Consulting Service Department is a service provider engaged in, Baidu keyword optimization and enterprise website construction and e-commerce services. Xinghua City letter network information consulting services department building system ne.asp page there is a SQL...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/06/20 12:0 a.m.2 views

SQL Injection Vulnerability in XSLCMS jo***.php Page

New Force Content Management System XSLCMS is a set of web content management system specialized for enterprise website construction. A SQL injection vulnerability exists in the XSLCMS jo.php page. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/06/19 12:0 a.m.1 views

SQL Injection Vulnerability in the Construction System of Hangzhou Bar Zero Technology Co.

Hangzhou Ba Zero Technology Co., Ltd. is a collection of website construction, enterprise mailbox, 400 telephone, network integrated marketing, web design, cell phone version of the website production, e-commerce applications, graphic design and other information technology services. There is a S...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/06/17 12:0 a.m.1 views

SQL Injection Vulnerability in the Website Building System of Chifeng E-top Network Limited (CNVD-2020-41736)

Chifeng ETO Network Co., Ltd. is a service company mainly engaged in website construction and website promotion. There is a SQL injection vulnerability in the website building system of Chifeng E-top Network Co., Ltd, which can be exploited by attackers to obtain sensitive information from the...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/06/17 12:0 a.m.1 views

Xuchang Yongcheng Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Xuchang Yongcheng Network Technology Co., Ltd. was founded in 2004, is committed to Internet development, micro letter application development, enterprise Internet promotion. There is a SQL injection vulnerability in Xuchang Yongcheng Network Technology Co., Ltd.'s website building system, which...

7.7AI score
Exploits0
Rows per page
Query Builder