Lucene search
+L

5746 matches found

CNVD
CNVD
•added 2018/12/06 12:00 a.m.•11 views

Dandelion Online Teaching System frontend ex*** routing file has SQL injection vulnerability

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/06 12:00 a.m.•8 views

SQL Injection Vulnerability in Frontend Ne*** Routing File of Dandelion Online Teaching System

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2018/12/06 12:00 a.m.•12 views

PT-2018-2686 · Civetweb +2 · Civetweb +2

Name of the Vulnerable Software and Affected Versions: CivetWeb affected versions not specified Description: The issue is related to resource management errors in the CivetWeb web server. It can be exploited by a remote attacker to cause a denial of service. Specifically, when CivetWeb is used as...

7.5CVSS5.8AI score0.02946EPSS
SaveExploits1References40
CNVD
CNVD
•added 2018/12/06 12:00 a.m.•9 views

SQL Injection Vulnerability in Frontend Vo*** Routing File of Dandelion Online Teaching System

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/06 12:00 a.m.•10 views

SQL Injection Vulnerability in Frontend Li*** Routing File of Dandelion Online Teaching System

Dandelion Online Teaching System is the website of Shenzhen Tomorrow See Technology Co., Ltd, which is an innovative science and technology enterprise focusing on the research and development of videoconferencing, video teaching and telemedicine system. Dandelion Online Teaching System has a SQL...

8AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/05 12:00 a.m.•10 views

SQL Injection Vulnerability in 56iq Digital Signage Software Frontend

56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. A SQL injection vulnerability...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/05 12:00 a.m.•13 views

File upload vulnerability in 56iq digital signage software frontend

56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. A file upload vulnerability...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/04 12:00 a.m.•8 views

Arbitrary File Download Vulnerability in 56iq Digital Signage Software Frontend

56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. An arbitrary file download...

6.8AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/04 12:00 a.m.•15 views

Directory Traversal Vulnerability in 56iq Digital Signage Software Frontend

56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. A directory traversal...

6.7AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/04 12:00 a.m.•11 views

56iq digital signage software frontend database has information leakage vulnerability

56iq digital signage software is a digital signage content creation software, used to create exciting programs in plasma liquid crystal LCD flat-panel TVs, LED screens, projection equipment and other multimedia terminals playback and touch interactive applications. There is an information leakage...

6.5AI score
SaveExploits0
CNVD
CNVD
•added 2018/12/03 12:00 a.m.•6 views

Pbootcms V1.3.3 Code Execution Vulnerability in Frontend

PbootCMS is an open source free PHP enterprise website development and construction management system developed by Avantech. Pbootcms V1.3.3 version of the front-end code execution vulnerabilities. The vulnerability is caused by failure to filter parameters. An attacker can exploit this...

8.1AI score
SaveExploits0
CNVD
CNVD
•added 2018/11/27 12:00 a.m.•7 views

zzzcms V1.5.7 php official version of the foreground in***.php page SQL injection vulnerability

zzcms is a free and open source building system, mainly facing the majority of webmasters to use. zzzcms V1.5.7 php official version of the foreground in.php page there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2018/11/22 12:00 a.m.•6 views

File upload vulnerability in PHPOK frontend us***.php file

PHPOK is a set of enterprise station CMS system developed in PHP + MYSQL language. A file upload vulnerability exists in the us.php file in the frontend of PHPOK. Allows attackers to upload webshell and gain server privileges...

7.2AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/11/15 12:00 a.m.•256 views

WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting

======================================================================================== Custom Frontend Login Registration Form v1.01 WP Plugin - Multiple XSS Vulnerabilities ======================================================================================== Exploit Title: Custom Frontend...

7.4AI score
SaveExploits0
zdt
zdt
•added 2018/11/15 12:00 a.m.•264 views

WordPress Custom Frontend Login Registration Form 1.01 Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ======================================================================================== Custom Frontend Login Registration Form v1.01 WP Plugin - Multiple XSS Vulnerabilities...

7.4AI score
SaveExploits0
WPVulnDB
WPVulnDB
•added 2018/11/09 12:00 a.m.•42 views

Buddyforms < 2.2.8 - SQL Injection

The Contact – Registration – Post Form Builder & FrontEnd Editor BuddyForms – Making WordPress Forms A Breeze WordPress plugin was affected by a SQL Injection security vulnerability...

7.5CVSS2AI score0.01833EPSS
SaveExploits0Affected Software1
CNVD
CNVD
•added 2018/11/07 12:00 a.m.•12 views

File Upload Vulnerability in the Frontend of Online Training System of Beijing Xinqi Technology Co.

Beijing Xinqi Technology Co., Ltd. is a technical service enterprise specializing in the research and development of training management software. A file upload vulnerability exists in the frontend of the online training system of Beijing Xinqi Technology Co., Ltd. that can be exploited by an...

7.2AI score
SaveExploits0
CNVD
CNVD
•added 2018/11/06 12:00 a.m.•8 views

PHP7CMS frontend Se***.php file has SQL injection vulnerability

PHP7 content management system referred to as PHP7CMS by Chunjie studio using PHP7 technology newly developed content management program. PHP7CMS foreground Se.php file exists SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2018/11/05 12:00 a.m.•6 views

SQL Injection Vulnerability in Th***.php file of PawnBuilder CMS Frontend

SmallBuild CMS is a website management backend based on the OneThink open source framework. There is a SQL injection vulnerability in the Th.php file in the frontend of PawnBuilder CMS. Attackers can use the vulnerability to obtain database sensitive information...

7.9AI score
SaveExploits0
RedHat Linux
RedHat Linux
•added 2018/10/30 12:05 p.m.•11 views

kernel: Use-after-free in drivers/media/dvb-core/dvb_frontend.c

The dvb frontend management subsystem in the Linux kernel contains a use-after-free which can allow a malicious user to write to memory that may be assigned to another kernel structure. This could create memory corruption, panic, or possibly other side affects...

7.2CVSS7.1AI score0.00383EPSS
SaveExploits0References4
Rows per page
Query Builder