Lucene search
K

10 matches found

OSV
OSV
added 2022/11/27 3:15 a.m.2 views

CVE-2022-45930

A SQL injection issue was discovered in AAA in OpenDaylight ODL before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java deleteDomain function is affected for the /auth/v1/domains/ API interface...

7.5CVSS5.8AI score0.00204EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/11/27 12:0 a.m.3 views

PT-2022-27689 · Unknown · Opendaylight

Name of the Vulnerable Software and Affected Versions: OpenDaylight versions prior to 0.16.5 Description: A SQL injection issue was discovered in the AAA component of OpenDaylight. The deleteDomain function in DomainStore.java is affected, specifically for the "/auth/v1/domains/" API interface...

7.5CVSS7.1AI score0.00204EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/11/27 12:0 a.m.1 views

OpenDaylight SQL注入漏洞

OpenDaylight ODL is an open source SDN controller from OpenDaylight Open Source. A security vulnerability exists in versions of OpenDaylight ODL prior to 0.16.5, which stems from its aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/DomainStore.java component in the /auth...

7.5CVSS7.1AI score0.00204EPSS
Exploits1References3
NVD
NVD
added 2019/09/10 4:15 p.m.15 views

CVE-2019-14730

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.851, an insecure object reference allows an attacker to delete a domain from a victim's account via an attacker account...

4.3CVSS4.6AI score0.00582EPSS
Exploits1References3
CVE
CVE
added 2019/09/10 3:23 p.m.47 views

CVE-2019-14730

CVE-2019-14730 affects CentOS Web Panel 0.9.8.851. The vulnerability is an insecure object reference that allows an attacker with an account to delete a domain from another user’s account. Root cause: insufficient access control around domain management/object references. Impact: unauthorized dom...

4.3CVSS4.6AI score0.00582EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2019/09/10 12:0 a.m.2 views

PT-2019-4644 · Centos · Centos Web Panel

Name of the Vulnerable Software and Affected Versions: CentOS Web Panel version 0.9.8.851 Description: The issue exists due to insufficient input validation in the application, allowing a remote attacker to delete a domain from a user's account. This can be achieved by an attacker using their own...

4.3CVSS4.6AI score0.00582EPSS
Exploits1References6
Packet Storm
Packet Storm
added 2018/01/24 12:0 a.m.62 views

CentOS Web Panel 0.9.8.12 SQL Injection

Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22 Vulnerability Laboratory ID VL-ID:...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2018/01/23 12:0 a.m.37 views

CentOS Web Panel 0.9.8.12 - row_id domain SQL Injection

CentOS Web Panel 0.9.8.12 - rowid domain SQL Injection Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22...

0.1AI score
Exploits0
Exploit DB
Exploit DB
added 2018/01/23 12:0 a.m.35 views

CentOS Web Panel 0.9.8.12 - 'row_id' / 'domain' SQL Injection

Document Title: =============== CentOS Web Panel v0.9.8.12 - Remote SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 Release Date: ============= 2018-01-22 Vulnerability Laboratory ID VL-ID:...

7.4AI score
Exploits0
Vulnerability Lab
Vulnerability Lab
added 2018/01/22 12:0 a.m.148 views

CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities

Document Title: =============== CentOS Web Panel v0.9.8.12 - SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1833 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5960 CVE-ID: ======= CVE-2018-5960 Release Date:...

6.5CVSS8.7AI score0.00232EPSS
Exploits4
Rows per page
Query Builder