Lucene search
K

17 matches found

RedhatCVE
RedhatCVE
added 2025/10/31 10:7 p.m.3 views

CVE-2016-15051

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

5.4CVSS6.2AI score0.00501EPSS
Exploits0References1
NVD
NVD
added 2025/10/30 10:15 p.m.2 views

CVE-2016-15051

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

5.4CVSS0.00501EPSS
Exploits0References2
OSV
OSV
added 2025/10/30 10:15 p.m.2 views

CVE-2016-15051

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

5.4CVSS5.9AI score0.00501EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/30 9:55 p.m.1 views

CVE-2016-15051 Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

5.1CVSS5.8AI score0.00501EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/30 9:55 p.m.5 views

CVE-2016-15051 Nagios XI < 5.2.4 XSS via Report startdate/enddate Fields

Nagios XI versions prior to 5.2.4 are vulnerable to cross-site scripting XSS via the Reports interface through values from the startdate and enddate fields. Insufficient validation or escaping of user-supplied input may allow an attacker to inject and execute arbitrary script in the context of a...

5.1CVSS0.00501EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-46259

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.00264EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 1:24 a.m.5 views

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

9.8CVSS8.3AI score0.00264EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/03/03 12:0 a.m.2 views

EsafeNet CDG 注入漏洞

EsafeNet CDG is a document security management system from EsafeNet. An injection vulnerability exists in EsafeNet CDG version 5.6.3.154.205, which originates from improper handling of the startDate/endDate parameter in the /CDGServer3/logManagement/ClientSortLog.jsp file, resulting in SQL...

9.8CVSS8AI score0.00076EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/01/15 12:0 a.m.1 views

Stracker SQL注入漏洞

Stracker is an application by visegripped individual developers. Stracker suffers from a SQL injection vulnerability that stems from the fact that incorrect manipulation of the parameters symbol/startDate/endDate can lead to sql injection...

9.8CVSS6.5AI score0.00347EPSS
Exploits0References5
CNVD
CNVD
added 2022/11/24 12:0 a.m.20 views

Billing System Project getOrderReport.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

9.8CVSS9.6AI score0.00264EPSS
Exploits0References1
NVD
NVD
added 2022/11/22 1:15 a.m.12 views

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

9.8CVSS0.00264EPSS
Exploits0References2
OSV
OSV
added 2022/11/22 1:15 a.m.1 views

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

9.8CVSS5.8AI score0.00264EPSS
Exploits0References2
Prion
Prion
added 2022/11/22 1:15 a.m.11 views

Sql injection

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

7.5CVSS9.7AI score0.00264EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/22 12:0 a.m.2 views

Billing System Project SQL注入漏洞

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

9.8CVSS7.8AI score0.00264EPSS
Exploits0References3
Cvelist
Cvelist
added 2022/11/22 12:0 a.m.10 views

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

10AI score0.00264EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/11/22 12:0 a.m.7 views

CVE-2022-43215

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the endDate parameter at getOrderReport.php...

9.8AI score0.00264EPSS
Exploits0References2
CNVD
CNVD
added 2017/07/15 12:0 a.m.1 views

wstmall open source mall system endDate parameter SQL injection vulnerability

WSTMall is a multi-commercial O2O open source system developed by Merchant Software based on thinkphp, is a system that can help companies and individuals to quickly build a community service system. wstmall open source mall system endDate parameter SQL injection vulnerability , due to the system...

7.9AI score
Exploits0
Rows per page
Query Builder