6680 matches found
CVE-2020-25253
An issue was discovered in Hyland OnBase 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and below. It allows SQL injection, as demonstrated by the TableName, ColumnName, Name, UserId, or Password parameter...
Hyland OnBase SQL Injection Vulnerability (CNVD-2020-52045)
Hyland OnBase is an enterprise information platform for managing your content, processes and cases. Hyland OnBase suffers from a SQL injection vulnerability. The vulnerability can be exploited by an attacker to conduct a SQL injection attack via the TableName, ColumnName, Name, UserId, or Passwor...
CVE-2020-25005
Heybbs v1.2 has a SQL injection vulnerability in msg.php file via the ID parameter which may allow a remote attacker to execute arbitrary code...
openSIS SQL Injection Vulnerability (CNVD-2020-50948)
openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in CourseMoreInfo.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...
openSIS SQL Injection Vulnerability (CNVD-2020-51261)
openSIS is a free, open source student information system/school management software. A SQL injection vulnerability exists in the id parameter in CoursePeriodModal.php in openSIS 7.3. An attacker can exploit this vulnerability by sending an HTTP request to perform a SQL injection attack...
openSIS SQL Injection Vulnerability (CNVD-2020-50949)
openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in MassDropModal.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...
openSIS SQL Injection Vulnerability (CNVD-2020-50947)
openSIS is a free, open source student information system/school management software. An SQL injection vulnerability exists in the id parameter in ChooseCP.php in OS4Ed openSIS 7.3, which can be exploited by an attacker sending an HTTP request to conduct an SQL injection attack...
Sql injection
SQL injection vulnerability exists in the CoursePeriodModal.php page of OS4Ed openSIS 7.3. The id parameter in the page CoursePeriodModal.php is vulnerable to SQL injection. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2020-23981
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...
CVE-2020-23981
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...
CVE-2020-23979
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...
Cross site scripting
13enforme CMS 1.0 has Cross Site Scripting via the "content.php" id parameter...
Sql injection
13enforme CMS 1.0 has SQL Injection via the 'content.php' id parameter...
CVE-2020-23977
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...
CVE-2020-23977
KandNconcepts Club CMS 1.1 and 1.2 has cross site scripting via the 'team.php,player.php,club.php' id parameter...
CVE-2020-23975
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...
CVE-2020-23975
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has cross site scripting via the 'search.php' id parameter...
CVE-2020-23976
Webexcels Ecommerce CMS 2.x, 2017, 2018, 2019, 2020 has SQL Injection via the 'content.php' id parameter...