Lucene search
K

6 matches found

CNNVD
CNNVD
added 2022/03/30 12:0 a.m.2 views

OpenEMR 跨站脚本漏洞

OpenEMR is an open source healthcare management system from the OpenEMR community. The system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. cross-site scripting vulnerabilities exist in versions of OpenEMR prior to...

4.6CVSS5.7AI score0.18525EPSS
Exploits2References4
CNVD
CNVD
added 2018/11/28 12:0 a.m.1 views

TerraMaster TOS System Command Injection Vulnerability

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A system command injection vulnerability exists in the ajaxdata.php file in...

9CVSS9.2AI score0.1198EPSS
Exploits1References1
OSV
OSV
added 2018/11/27 9:29 p.m.1 views

CVE-2018-13418

System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter...

8.8CVSS5.9AI score
Exploits0References1
Prion
Prion
added 2018/11/27 9:29 p.m.6 views

Command injection

System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter...

9CVSS9.1AI score0.1198EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2015/02/11 7:59 p.m.8 views

Sql injection

Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter to 1 copy2.php, 2 localize.php, 3 metai.php, 4 nc.php, 5 new2.php, or 6 rename2.php in u5admin/; 7 c parameter to u5admin/editor.php; 8 typ parameter to...

7.5CVSS9.2AI score0.00826EPSS
Exploits2References2Affected Software1
OSV
OSV
added 2007/01/19 2:28 a.m.1 views

DEBIAN-CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

6.8CVSS6.2AI score0.02243EPSS
Exploits0References1
Rows per page
Query Builder