Lucene search
+L

12 matches found

Prion
Prion
•added 2022/05/26 2:15 p.m.•31 views

Sql injection

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/news/save...

6.5CVSS7.2AI score0.00847EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/26 1:27 p.m.•50 views

CVE-2022-29665

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...

7.5AI score0.00847EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•9 views

CVE-2022-29669: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/lists/zhuan...

8.8CVSS7.8AI score0.0097EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/26 12:00 a.m.•10 views

CVE-2022-29665: Improper Neutralization of Special Elements used in an SQL Command

CSCMS Music Portal System v4.2 was discovered to contain a SQL injection vulnerability via the id parameter at /admin.php/news/admin/topic/save...

7.2CVSS7.2AI score0.00847EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•11 views

PT-2022-19768

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/topic/save" API endpoint. This allows for potential exploitation...

7.2CVSS0.00847EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•6 views

PT-2022-19771

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/lists/zhuan" API endpoint. Recommendations For CSCMS Music Portal System...

8.8CVSS0.0097EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/05/26 12:00 a.m.•9 views

PT-2022-19765

Name of the Vulnerable Software and Affected Versions CSCMS Music Portal System version 4.2 Description A SQL injection issue was found in the CSCMS Music Portal System via the id parameter at the "/admin.php/news/admin/news/save" API endpoint. This allows for potential exploitation of the system...

7.2CVSS0.00847EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/03/10 5:46 p.m.•27 views

CVE-2022-24602

Luocms v2.0 is affected by SQL Injection in /admin/news/newsmod.php...

9.8CVSS5.8AI score0.01155EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2021/07/29 3:04 p.m.•40 views

CVE-2020-21808

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...

9.9AI score0.01583EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/29 12:00 a.m.•7 views

CVE-2020-21808: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php...

9.8CVSS5.8AI score0.01583EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2017/04/18 10:19 p.m.•15 views

burnley.ac.uk XSS vulnerability

Vulnerable URL: http://www.burnley.ac.uk/news-admin?SearchTag=%3Cscript%3Ealertdocument.domain%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1856453 VIP website...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/13 12:00 a.m.•8 views

CVE-2006-3553: Undefined Security Weakness

PlaNet Concept planetNews allows remote attackers to bypass authentication and execute arbitrary code via a direct request to news/admin/planetnews.php...

10CVSS6.4AI score0.06229EPSS
SaveExploits1References1
Rows per page
Query Builder