Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2021/11/19 8:42 p.m.•43 views

SQL Injection in thinkjs

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

9.8CVSS10.2AI score0.01507EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
•added 2021/02/02 12:00 a.m.•73 views

ThinkJS SQL Injection Vulnerability

ThinkJS is a Node.js framework for future-proof development that integrates a wide range of project best practices to make enterprise-level development easier and more efficient. A SQL injection vulnerability exists in the model.increment and model.decrease functions in ThinkJS 3.2.10. A remote...

9.8CVSS8.4AI score0.01507EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/02/01 6:15 p.m.•22 views

CVE-2020-21176

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

9.8CVSS8.7AI score0.01507EPSS
SaveExploits1References2
Mend
Mend
•added 2021/02/01 5:37 p.m.•7 views

CVE-2020-21176

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

9.8CVSS0.01507EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/02/01 12:00 a.m.•22 views

ThinkJS SQL Injection Vulnerability

ThinkJS is a Node.js framework for future-proof development that integrates a wide range of project best practices to make enterprise-level development easier and more efficient. A SQL injection vulnerability exists in the model.increment and model.decrease functions in ThinkJS 3.2.10. A remote...

9.8CVSS6.1AI score0.01507EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2021/02/01 12:00 a.m.•3 views

PT-2021-10600

Name of the Vulnerable Software and Affected Versions: ThinkJS version 3.2.10 Description: The issue allows remote attackers to execute arbitrary SQL commands via the step parameter in the model.increment and model.decrement functions. This enables attackers to potentially access or modify...

9.8CVSS0.01507EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/01 12:00 a.m.•9 views

CVE-2020-21176: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter...

9.8CVSS6.4AI score0.01507EPSS
SaveExploits1References2
Rows per page
Query Builder