Lucene search
+L

13398 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/16 12:00 a.m.•6 views

CVE-2021-41654: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php...

9.8CVSS8.6AI score0.01064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/16 12:00 a.m.•3 views

PT-2022-11453

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description The issue allows attackers to execute arbitrary SQL commands via the keyValue parameter in the "/coreframe/app/pay/admin/index.php" API endpoint. This enables attackers to manipulate database queries,...

9.8CVSS0.01064EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•53 views

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67151)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a missing filter escape for SQL data in the parent parameter of index,php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data...

7.5CVSS4.8AI score0.01243EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/14 12:00 a.m.•58 views

dynamicMarkt SQL Injection Vulnerability (CNVD-2022-67152)

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

7.5CVSS4.6AI score0.01243EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/12 12:00 a.m.•5 views

PT-2022-11474

Name of the Vulnerable Software and Affected Versions SEOmatic plugin version 3.4.10 for Craft CMS 3 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script via a GET to "/index.php?action=seomatic/file/seo-file-link" with url parameter containing the...

6.1CVSS0.01083EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2022/06/10 10:15 p.m.•8 views

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

9.8CVSS7.3AI score0.01243EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/10 10:15 p.m.•35 views

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

9.8CVSS0.01278EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/10 10:15 p.m.•26 views

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

7.5CVSS9.8AI score0.01243EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/06/10 9:17 p.m.•85 views

CVE-2021-41756

CVE-2021-41756 affects dynamicMarkt versions 3.10 and earlier, with SQL injection in the kat parameter of index.php. The vulnerability arises from improper handling of the kat parameter, enabling potentially unauthenticated SQL injection. Public references in the dataset corroborate the descripti...

9.8CVSS9.9AI score0.01243EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/10 9:17 p.m.•45 views

CVE-2021-41756

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

10AI score0.01243EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/10 9:15 p.m.•29 views

Sql injection

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

7.5CVSS9.8AI score0.01243EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/10 9:12 p.m.•40 views

CVE-2021-41755

dynamicMarkt = 3.10 is affected by SQL injection in the kat1 parameter of index.php...

10AI score0.01278EPSS
SaveExploits1References2
CVE
CVE
•added 2022/06/10 9:12 p.m.•98 views

CVE-2021-41755

CVE-2021-41755 concerns dynamicMarkt versions

9.8CVSS9.8AI score0.01278EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•7 views

CVE-2021-41754: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the parent parameter of index.php...

9.8CVSS8.2AI score0.01243EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•3 views

PT-2022-7902

Name of the Vulnerable Software and Affected Versions PHPList versions 3.2.6 Description A critical issue affects the processing of the file /lists/index.php of the component Edit Subscription, leading to sql injection. The attack may be initiated remotely. Recommendations For PHPList version...

9.8CVSS0.21001EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•7 views

CVE-2017-20029: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPList 3.2.6 and classified as critical. This issue affects some unknown processing of the file /lists/index.php of the component Edit Subscription. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

9.8CVSS7.7AI score0.21001EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•2 views

PT-2022-11477

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions 3.10 and earlier Description The issue is related to SQL injection in the parent parameter of the "index.php" endpoint. This allows for potential exploitation. Recommendations For dynamicMarkt versions 3.10 and earlier, a...

9.8CVSS0.01243EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/06/10 12:00 a.m.•1 views

PT-2022-11479

Name of the Vulnerable Software and Affected Versions dynamicMarkt versions prior to 3.10 Description The issue is related to SQL injection in the kat parameter of "index.php". Recommendations For dynamicMarkt versions prior to 3.10, update to a version that contains a fix for this issue...

9.8CVSS0.01243EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/06/10 12:00 a.m.•17 views

dynamicMarkt SQL注入漏洞

dynamicMarkt is a software. dynamicMarkt 3.10 and earlier versions are vulnerable to SQL injection, which stems from a problem with the kat parameter in index.php and can be exploited by attackers for SQL injection...

9.8CVSS5.8AI score0.01243EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/10 12:00 a.m.•9 views

CVE-2021-41756: Improper Neutralization of Special Elements used in an SQL Command

dynamicMarkt = 3.10 is affected by SQL injection in the kat parameter of index.php...

9.8CVSS8.2AI score0.01243EPSS
SaveExploits1References2
Rows per page
Query Builder