Lucene search
+L

3047 matches found

CNVD
CNVD
added 2018/11/19 12:0 a.m.8 views

SeaCMS SQL Injection Vulnerability (CNVD-2019-08331)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. SeaCMS 6.6.4 suffers from a SQL injection vulnerability, which can be exploited by attackers via the adminmakehtml.php topic parameter...

7.2CVSS8.1AI score0.01EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/11/16 12:0 a.m.3 views

SQL Injection Vulnerability in Website Building System of Shenzhen Zhongwang Internet Technology Development Co.

Ltd. is a one-stop Internet service provider that focuses on web application development and visual design, supplemented by online interactive brand marketing. There is a SQL injection vulnerability in the website building system of Shenzhen Zhongwang Internet Technology Development Co. Attackers...

7.7AI score
SaveExploits0
Gitee
Gitee
added 2018/11/13 10:27 a.m.9 views

vulhub

It is an offensive tool for Web Application. The repository contains a collection of pre-built vulnerable docker environments, including a web application vulnerable to various attacks. The tool is designed to help developers and security researchers test and demonstrate the effectiveness of web...

7AI score
SaveExploits0
CNVD
CNVD
added 2018/11/13 12:0 a.m.7 views

MetInfo pa***.php file has sql injection vulnerability

MetInfo is a content management system developed using PHP and Mysql. A sql injection vulnerability exists in the MetInfo pa.php file, which can be exploited by an attacker to obtain sensitive information from the database...

7.2AI score
SaveExploits0
CNVD
CNVD
added 2018/11/13 12:0 a.m.3 views

SQL Injection Vulnerability in MetInfo fe***.php File

MetInfo is a content management system developed using PHP and Mysql. A SQL injection vulnerability exists in the MetInfo fe.php file. An attacker can exploit the vulnerability to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2018/11/09 12:0 a.m.7 views

SQL injection vulnerability in free version of Touchmedia Mall system

TouchNet universal mall station-building system is a set of universal station-building system developed by Tianjin TouchNet Technology Co. TouchNet Universal Mall Station Building System free version of the foreground there is a SQL injection vulnerability, the attacker can be customized through...

7.6AI score
SaveExploits0
OSV
OSV
added 2018/10/29 12:29 p.m.6 views

CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie...

9.8CVSS5.8AI score0.01537EPSS
SaveExploits1References1
OSV
OSV
added 2018/10/29 12:29 p.m.9 views

CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie...

9.8CVSS5.8AI score0.01202EPSS
SaveExploits1References1
NVD
NVD
added 2018/10/24 8:29 p.m.25 views

CVE-2018-11785

Missing authorization check in Apache Impala before 3.0.1 allows a Kerberos-authenticated but unauthorized user to inject random data into a running query, leading to wrong results for a query...

6.5CVSS6.4AI score0.01221EPSS
SaveExploits0References2
CNVD
CNVD
added 2018/10/22 12:0 a.m.3 views

Changchun Lingzhan Software Co., Ltd.'s College Academic Affairs Management System Exploits SQL Injection Vulnerabilities

Changchun Lingzhan Software Co., Ltd. is a high-tech enterprise specializing in the development and sale of application software for the education industry. Changchun Lingzhan Software Co., Ltd. has a SQL injection vulnerability in the university academic affairs management system. Attackers can...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2018/10/17 12:0 a.m.9 views

CMS ISWEB SQL Injection Vulnerability

CMS ISWEB is a content management system CMS. A SQL injection vulnerability exists in CMS ISWEB version 3.5.3. A remote attacker can exploit this vulnerability to inject malicious query statements into the application and obtain sensitive information...

9.8CVSS9.8AI score0.02562EPSS
SaveExploits2References1
CNVD
CNVD
added 2018/10/11 12:0 a.m.6 views

REDAXO SQL Injection Vulnerability

REDAXO is an open source Web portal content management system . The system supports custom modules , plug-in extensions , project backup and so on. A SQL injection vulnerability exists in Benutzerverwaltung in versions prior to REDAXO 5.6.4. A remote attacker can exploit this vulnerability to...

9.8CVSS10AI score0.01421EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/09/26 12:0 a.m.11 views

SeaCMS SQL Injection Vulnerability (CNVD-2018-19865)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A SQL injection vulnerability exists in the 'order' parameter in SeaCMS version 6.64, which can be exploited by remote attackers to execute SQ...

9.8CVSS10AI score0.01189EPSS
SaveExploits1References1
CNVD
CNVD
added 2018/09/26 12:0 a.m.7 views

Social Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Social Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission ...

9.8CVSS9.7AI score0.03213EPSS
SaveExploits5References1
CNVD
CNVD
added 2018/09/25 12:0 a.m.8 views

SemCms php version V3.2 SQL injection vulnerability in frontend

SemCms is an open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SemCms php version V3.2 front-end SQL injection vulnerability , attackers can use the vulnerability to obtain the...

8.1AI score
SaveExploits0
CNVD
CNVD
added 2018/09/18 12:0 a.m.6 views

SQL injection vulnerability in ZZCMS 8.3 ta***.php file

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the ta.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2018/09/18 12:0 a.m.4 views

ZZCMS 8.3 version zs***.php file has SQL injection vulnerability

ZZCMS is a CMS Content Management System used to quickly build Merchants type websites. A SQL injection vulnerability exists in the zs.php file of ZZCMS version 8.3. An attacker can exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0
OSV
OSV
added 2018/09/08 3:29 p.m.9 views

CVE-2018-16724

An issue is discovered in baijiacms V4. Blind SQL Injection exists via the order parameter in an index.php?act=index request...

9.8CVSS5.8AI score0.01202EPSS
SaveExploits1References1
OSV
OSV
added 2018/09/05 8:29 p.m.8 views

CVE-2018-16436

Gxlcms 2.0 before bug fix 20180915 has SQL Injection exploitable by an administrator...

7.2CVSS5.8AI score0.01454EPSS
SaveExploits1References3
CNVD
CNVD
added 2018/08/20 12:0 a.m.13 views

SQL Injection Vulnerability in the Frontend of DaQuanZhouAuto.com

It is an automobile network platform that provides Quanzhou automobile, Quanzhou automobile information, Quanzhou new car, Quanzhou used car and other services. SQL injection vulnerability exists in the front-end of DaQuanZhouAuto.com, the vulnerability stems from the failure to filter the pagenu...

8AI score
SaveExploits0
Rows per page
Query Builder