Lucene search
K

890 matches found

CNVD
CNVD
added 2020/12/10 12:0 a.m.3 views

SQL Injection Vulnerability in SongCMS

SongCMS is a PHP+MySQL, ASP+Access/SQL Server based development, enterprise-oriented, multi-language support, free, open source CMS to help business users quickly build and deploy enterprise-level portals. SongCMS suffers from SQL injection vulnerability. An attacker can exploit the vulnerability...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/12/04 12:0 a.m.1 views

SQL Injection Vulnerability in the Website Building System of Nanjing Qianzhixun Network Technology Co.

hereinafter referred to as: Nanjing Qian Zhi Xun Network Technology Co., Ltd., with advanced design concepts and excellent design works enjoy popular industry, is one of the local professional website construction company in Nanjing. Ltd. website construction system SQL injection vulnerability,...

7.3AI score
Exploits0
CNVD
CNVD
added 2020/12/03 12:0 a.m.1 views

SQL Injection Vulnerability in the Comprehensive Management Platform of Beijing Zhongcheng Kexin Technology Development Co. Ltd (CNVD-2020-70798)

Beijing Zhongcheng Kexin Technology Development Co., Ltd. is a travel whole industry chain service provider. A SQL injection vulnerability exists in the integrated management platform of Beijing Zhongcheng Kexin Technology Development Co. An attacker can exploit this vulnerability to obtain...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/11/30 12:0 a.m.3 views

SQL Injection Vulnerability in the Website Building System of Nanjing Sanshang Computer Software Development Co.

Nanjing Sanshang Computer Software Development Co., Ltd. business scope includes: computer software, information software development, production and so on. Nanjing Sanshang Computer Software Development Co., Ltd. station building system there is a SQL injection vulnerability, the attacker can us...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/11/26 12:0 a.m.1 views

SQL Injection Vulnerability in Hsycms Frontend

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms suffers from a SQL injection vulnerability in the frontend. An attacker can exploit the vulnerability to obtain sensitive...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/11/19 12:0 a.m.1 views

SQL Injection Vulnerability in Intelligent Internet of Things System of Nanjing Jiuzhe Software Technology Co.

Nanjing Jiuzhe Software Technology Co., Ltd. business scope includes: software development, technical services, technical consulting services, technology transfer and so on. Nanjing Jiuzhe Software Technology Co., Ltd. intelligent Internet of things system SQL injection vulnerability, attackers c...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/11/19 12:0 a.m.3 views

Cisco IoT Field Network Information Disclosure Vulnerability

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. An information disclosure vulnerability exists in Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from a lack of authentication of sensitive information. An...

7.5CVSS6.5AI score0.01319EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2020/11/18 5:40 p.m.9 views

CVE-2020-26076 Cisco IoT Field Network Director Information Disclosure Vulnerability

A vulnerability in Cisco IoT Field Network Director FND could allow an unauthenticated, remote attacker to view sensitive database information on an affected device. The vulnerability is due to the absence of authentication for sensitive information. An attacker could exploit this vulnerability b...

5.3CVSS7AI score0.01319EPSS
Exploits0References1
Cisco
Cisco
added 2020/11/18 4:0 p.m.41 views

Cisco IoT Field Network Director Information Disclosure Vulnerability

A vulnerability in Cisco IoT Field Network Director FND could allow an unauthenticated, remote attacker to view sensitive database information on an affected device. The vulnerability is due to the absence of authentication for sensitive information. An attacker could exploit this vulnerability b...

5.3CVSS6.4AI score0.01319EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/11/18 12:0 a.m.3 views

Cisco IoT Field Network Director 信息泄露漏洞

Cisco IoT Field Network Director FND is a network management system for large-scale FAN deployments. An information disclosure vulnerability exists in Cisco IoT Field Network Director versions prior to 4.6.1. The vulnerability stems from a lack of authentication of sensitive information. An...

7.5CVSS6.4AI score0.01319EPSS
Exploits0References3
CNVD
CNVD
added 2020/11/17 12:0 a.m.1 views

SQL Injection Vulnerability in the Customer Platform of Shanxi Shanda Xinwang Technology Co.

Shanxi Shanda New Network Technology Co., Ltd. is a high-tech company specializing in the development of industry application software products, software services, the company has long been committed to providing enterprise management software with independent intellectual property rights,...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/11/10 12:0 a.m.2 views

Victor CMS suffers from SQL injection vulnerability

Victor CMS is a simple content management system. Victor CMS suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/11/06 12:0 a.m.1 views

SQL Injection Vulnerability in Embedded High Definition Recording and Playback System of Guangzhou Haisheng Computer Technology Co.

Embedded high-definition recording and broadcasting system adopts high-performance SOC processor, which can realize 1080P encoding display up to 60 frames per second, support POC power supply function, a standard SDI cable can realize video transmission, power supply and PTZ control and other...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/11/01 12:0 a.m.1 views

SQL injection vulnerability in ad***.cl***.php file in the backend of MTCEO repository system

MTCEO library system using php + mysql, built by thinkphp underlying , Baidu library template style for the basic style . MTCEO library system background ad.cl.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain database sensitive information...

8AI score
Exploits0
CNVD
CNVD
added 2020/10/30 12:0 a.m.2 views

SQL Injection Vulnerability in Shield Spirit Voting Sucking System

Shield Spirit Voting Powder Sucking System can be applied to the public number, through the WeChat public number of the message interface to collect the user to send the vote number of the data to reach the vote, with anti-brush voting voting function, but also efficiently suck the live powder...

7.8AI score
Exploits0
CNVD
CNVD
added 2020/10/26 12:0 a.m.1 views

SQL Injection Vulnerability in Jinhui BuildingEasy™ V5.4

Jinhui BuildingEasy™ V5.4 hereinafter referred to as BE5.4, the platform uses the Microsoft Framework 4.0 framework, adopts a layered design pattern, and, on the basis of ensuring the vertical separation of code MVC, it also uses component insertion and removal technology on the business layer,...

7.9AI score
Exploits0
CNVD
CNVD
added 2020/10/18 12:0 a.m.1 views

SQL Injection Vulnerability in ZZCMS Frontend (CNVD-2020-59408)

ZZCMS is a content management system. A SQL injection vulnerability exists in the frontend of ZZCMS2020, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2020/10/16 12:0 a.m.3 views

SQL Injection Vulnerability in the Management Platform of Internet Service Establishments of the Public Security Bureau (CNVD-2020-60077)

Harbin Zhonglong Baiying Technology Development Co., Ltd. was established on May 29, 2013, mainly engaged in computer hardware and software, office automation equipment, security equipment and so on. A SQL injection vulnerability exists in the management platform of the Public Security Bureau's...

7.7AI score
Exploits0
CNVD
CNVD
added 2020/10/13 12:0 a.m.3 views

Wuxi Xuncheng Information Technology Co., Ltd. website building system has SQL injection vulnerabilities

Wuxi Xuncheng Information Technology Co., Ltd. is an enhancement of corporate brand image, brand temperament, creative innovation, interactive experience, visual design, technology research and development as one of the integrated interactive design and innovation services enterprise, to provide...

8AI score
Exploits0
CNVD
CNVD
added 2020/10/11 12:0 a.m.2 views

SQL Injection Vulnerability in Alencms

Dongguan Lightspeed Network is a large network company, specializing in providing website design services for the majority of small and medium-sized enterprises, government agencies, etc.. Alencms has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database...

7.8AI score
Exploits0
Rows per page
Query Builder