Lucene search
+L

6807 matches found

OSV
OSV
added 2023/06/20 3:15 p.m.9 views

CVE-2020-20636

SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...

7.5CVSS5.8AI score0.00744EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/20 3:15 p.m.21 views

Sql injection

SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...

5CVSS7.7AI score0.00744EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/06/20 12:00 a.m.10 views

Joyplus-cms SQL注入漏洞

Joyplus-cms is joyplus open source a content management system . A security vulnerability exists in Joyplus-cms version 1.6.0. An attacker exploited the vulnerability to access sensitive information via the id parameter of the goodbad function...

7.5CVSS7.4AI score0.00744EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/06/20 12:00 a.m.13 views

PT-2023-11557 · Unknown · Joyplus-Cms

Name of the Vulnerable Software and Affected Versions: Joyplus-cms version 1.6.0 Description: A SQL injection issue allows a remote attacker to access sensitive information via the id parameter of the goodbad function. This enables unauthorized access to sensitive data. Recommendations: For...

7.5CVSS7.9AI score0.00744EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/06/20 12:00 a.m.34 views

CVE-2020-20636

SQL injection vulnerability found in Joyplus-cms v.1.6.0 allows a remote attacker to access sensitive information via the id parameter of the goodbad function...

7.6AI score0.00744EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/06/20 12:00 a.m.8 views

PHPMyWind SQL注入漏洞

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A SQL injection vulnerability exists in PHPMyWind v.5.6, which can be exploited by remote attackers to execute arbitrary code via the id variable in the modify function...

7.2CVSS8.8AI score0.01127EPSS
SaveExploits1References2
OSV
OSV
added 2023/06/19 11:15 a.m.5 views

CVE-2023-2719

The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the id parameter for an Agent in the REST API before using it in an SQL statement, leading to an SQL Injection exploitable by users with a role as low as Subscriber...

8.8CVSS7.4AI score0.01203EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/06/19 12:00 a.m.13 views

PT-2023-20994 · WordPress · Supportcandy

Name of the Vulnerable Software and Affected Versions: SupportCandy WordPress plugin versions prior to 3.1.7 Description: The issue concerns a lack of proper sanitization and escaping of the id parameter for an Agent in the REST API, which can lead to an SQL Injection. This can be exploited by...

8.8CVSS9.7AI score0.01203EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/06/19 12:00 a.m.8 views

WordPress Plugin SupportCandy SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS8.5AI score0.01203EPSS
SaveExploits1References2
OSV
OSV
added 2023/06/16 6:30 p.m.87 views

GHSA-934G-FVCC-4833 jeecg-boot SQL injection vulnerability

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface...

9.8CVSS9.8AI score0.1248EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2023/06/16 6:30 p.m.36 views

jeecg-boot SQL injection vulnerability

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface...

9.8CVSS8.1AI score0.1248EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/06/16 6:15 p.m.7 views

CVE-2023-34659

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface...

9.8CVSS7.4AI score0.1248EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/06/16 12:00 a.m.11 views

Jeecg-Boot SQL注入漏洞

Jeecg-Boot is a low-code platform based on a code generator from the JeecgBoot community. A security vulnerability exists in jeecg-boot versions 3.5.0 and 3.5.1, which stems from a SQL injection vulnerability in the id parameter of the /jeecg-boot/jmreport/show interface...

9.8CVSS8.6AI score0.1248EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/06/16 12:00 a.m.34 views

CVE-2023-34659

jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface...

10AI score0.1248EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/06/14 12:00 a.m.10 views

bloofoxCMS SQL注入漏洞

bloofoxCMS is a Php-based text content management system by the individual developer of bloofoxCMS. A security vulnerability exists in bloofoxCMS version v0.5.2.1, which stems from the cid parameter found to contain an SQL injection vulnerability via...

9.8CVSS8.5AI score0.01006EPSS
SaveExploits1References1
NVD
NVD
added 2023/06/12 3:15 p.m.23 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

9.8CVSS9.8AI score0.03282EPSS
SaveExploits2References4
ATTACKERKB
ATTACKERKB
added 2023/06/12 3:15 p.m.9 views

CVE-2023-34581

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

9.8CVSS7.5AI score0.03282EPSS
SaveExploits2References5
Prion
Prion
added 2023/06/12 3:15 p.m.22 views

Sql injection

Sourcecodester Service Provider Management System v1.0 is vulnerable to SQL Injection via the ID parameter in /php-spms/?page=services/view&id=2...

7.5CVSS9.7AI score0.03282EPSS
SaveExploits2References4Affected Software1
CNNVD
CNNVD
added 2023/06/12 12:00 a.m.8 views

Service Provider Management System SQL注入漏洞

Service Provider Management System is a web-based application developed by Carlo Montero, an individual developer. It is designed to provide dynamic websites for service provider companies. A security vulnerability exists in Service Provider Management System v1.0, which was discovered to contain...

9.8CVSS8.6AI score0.03282EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2023/06/12 12:00 a.m.10 views

PT-2023-24934 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Service Provider Management System version 1.0 Description: The issue is related to SQL Injection via the id parameter in the "/php-spms/?page=services/view&id=2" endpoint. This allows for potential exploitation. No information...

9.8CVSS9.5AI score0.03282EPSS
SaveExploits2References7
Rows per page
Query Builder