Lucene search
+L

3819 matches found

0day.today
0day.today
added 2022/07/21 12:0 a.m.364 views

Emporium eCommerce Online Shopping CMS 1.2 SQL Injection Vulnerability

┌┌────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

0.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/07/20 12:0 a.m.254 views

Emporium eCommerce Online Shopping CMS 1.2 SQL Injection

┌┌────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

0.2AI score
SaveExploits0
OSV
OSV
added 2022/07/19 10:15 a.m.5 views

CVE-2022-2467

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input [email protected]' AND SELECT 6427 FROM SELECTSLEEP5LwLu AND 'hsvT'='hsvT leads ...

9.8CVSS5.8AI score0.0453EPSS
SaveExploits1References2
0day.today
0day.today
added 2022/07/19 12:0 a.m.324 views

Property Listing Script 3.1 SQL Injection Vulnerability

┌┌────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

0.5AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/07/18 12:0 a.m.268 views

Travel Tours Script 1.0 SQL Injection

┌┌────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/07/18 12:0 a.m.335 views

Property Listing Script 3.1 SQL Injection

┌┌────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

0.4AI score
SaveExploits0
OSV
OSV
added 2022/05/24 5:15 p.m.6 views

CVE-2022-22495

IBM i 7.3, 7.4, and 7.5 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 226941...

8.8CVSS5.9AI score0.02186EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2022/05/23 12:0 a.m.294 views

Blockchain AltExchanger 1.2.1 SQL Injection

Information Vulnerability Name : Multiple Remote SQL Injections in Inout Blockchain AltExchanger Product : Inout Blockchain AltExchanger version : 1.2.1 Date : 2022-05-21 Vendor Site : https://www.inoutscripts.com/products/inout-blockchain-altexchanger/ Exploit Detail :...

0.3AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2022/01/24 6:18 a.m.4 views

CVE-2021-43927

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Security Management functionality in Synology DiskStation Manager DSM before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors...

9.8CVSS7.4AI score0.00875EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/22 2:15 p.m.20 views

CVE-2021-42169

The Simple Payroll System with Dynamic Tax Bracket in PHP using SQLite Free Source Code by: oretnom23 is vulnerable from remote SQL-Injection-Bypass-Authentication for the admin account. The parameter username from the login form is not protected correctly and there is no security and escaping fr...

9.8CVSS0.0274EPSS
SaveExploits1References2
OSV
OSV
added 2021/10/15 3:15 p.m.6 views

CVE-2021-40993

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass...

8.1CVSS7.3AI score0.01054EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/15 2:15 p.m.4 views

CVE-2021-40992

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass...

7.2CVSS7.1AI score0.01072EPSS
SaveExploits0References1
CVE
CVE
added 2021/10/15 1:36 p.m.52 views

CVE-2021-40992

Aruba ClearPass Policy Manager (HPE Aruba) has a remote SQL injection vulnerability (CVE-2021-40992). Affected releases: 6.10.x before 6.10.2; 6.9.x before 6.9.7-HF1; 6.8.x before 6.8.9-HF1. The issue could allow an attacker to obtain and modify data in the underlying database. Aruba has released...

7.2CVSS7.3AI score0.01072EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2021/10/15 1:15 p.m.6 views

CVE-2021-37737

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass...

8.8CVSS5.9AI score0.01111EPSS
SaveExploits0References1
OSV
OSV
added 2021/07/30 2:15 p.m.6 views

CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

9.8CVSS5.8AI score0.03414EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/07/30 2:15 p.m.3 views

CVE-2021-37593

PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest unauthenticated can inject a malicious SQL query in order to affect the execution of predefined SQL commands. Upon a successful SQL injection attack, an attacker can read sensitive data from the database and possibly...

9.1CVSS7.4AI score0.05161EPSS
SaveExploits2References4
Prion
Prion
added 2021/07/30 2:15 p.m.20 views

Sql injection

PEEL Shopping version 9.4.0 allows remote SQL injection. A public user/guest unauthenticated can inject a malicious SQL query in order to affect the execution of predefined SQL commands. Upon a successful SQL injection attack, an attacker can read sensitive data from the database and possibly...

6.4CVSS9.4AI score0.05161EPSS
SaveExploits2References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/30 2:15 p.m.3 views

CVE-2021-36624

Sourcecodester Phone Shop Sales Managements System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

9.8CVSS7.3AI score0.03414EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2021/07/14 12:0 a.m.61 views

Liferay Portal 7.3.5 SQLi

Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to 1 CommerceChannelRelFinder.countByCC, or 2 CommerceChannelRelFinder.findByCC. Note that Nessus has not tested for this issue but has...

8.8CVSS8.3AI score0.01148EPSS
SaveExploits0References2
OSV
OSV
added 2021/07/13 2:15 p.m.7 views

CVE-2021-33578

Echo ShareCare 8.15.5 is susceptible to SQL injection vulnerabilities when processing remote input from both authenticated and unauthenticated users, leading to the ability to bypass authentication, exfiltrate Structured Query Language SQL records, and manipulate data...

9.8CVSS5.9AI score0.0119EPSS
SaveExploits0References1
Rows per page
Query Builder