Lucene search
K

8 matches found

CNVD
CNVD
added 2023/08/12 12:0 a.m.10 views

ScienceLogic SL1 SQL Injection Vulnerability (CNVD-2023-66416)

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.2AI score0.00098EPSS
Exploits0References1
NVD
NVD
added 2023/08/09 7:15 p.m.7 views

CVE-2022-48600

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS8.9AI score0.00098EPSS
Exploits0References1
OSV
OSV
added 2023/08/09 7:15 p.m.1 views

CVE-2022-48600

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS5.9AI score0.00098EPSS
Exploits0References1
Prion
Prion
added 2023/08/09 7:15 p.m.12 views

Sql injection

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user-controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

6.5CVSS8.8AI score0.00098EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/08/09 6:28 p.m.17 views

CVE-2022-48600

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS9.1AI score0.00098EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/08/09 6:28 p.m.14 views

CVE-2022-48600

A SQL injection vulnerability exists in the “notes view” feature of the ScienceLogic SL1 that takes unsanitized user‐controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database...

8.8CVSS7.8AI score0.00098EPSS
Exploits0References1
CVE
CVE
added 2023/08/09 6:28 p.m.37 views

CVE-2022-48600

CVE-2022-48600 is a SQL injection vulnerability in the notes view feature of ScienceLogic SL1. The flaw accepts unsanitized user-controlled input which is passed directly to a SQL query, enabling arbitrary SQL execution against the database. Documents indicate the issue affects SL1 versions up to...

8.8CVSS8.8AI score0.00098EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/08/09 12:0 a.m.0 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00098EPSS
Exploits0References2
Rows per page
Query Builder