Lucene search
+L

6922 matches found

CNVD
CNVD
added 2020/02/24 12:00 a.m.4 views

Yantai Cloud Pulse Network Technology Co., Ltd. SQL injection vulnerability exists in Cloud Pulse Network website building system

Yantai cloud pulse network technology limited company cloud pulse network for brands to provide network station building services. There is a SQL injection vulnerability in the Yantai Cloud Vein Network Technology Co., Ltd. website builder system that can be exploited by attackers to obtain...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/02/24 12:00 a.m.4 views

SQL Injection Vulnerability in Qingdao Shangzhixin Network Technology Co.

Qingdao business to letter network dedicated to Qingdao website construction, Qingdao Baidu promotion. Qingdao Shangzhixin Network Technology Co., Ltd. website construction system there is a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/02/24 12:00 a.m.2 views

Nantong XED Software Co., Ltd. website building system has SQL injection vulnerabilities

Nantong XED Software Co., Ltd. in 2002 to get involved in the Internet industry, the use of the Internet's fast, comprehensive, accurate features, specializing in the construction of Haian area enterprises, business Web site, and Sina, Sohu, Baidu, Yahoo, Huicong real-time online registration...

7.8AI score
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2020/02/24 12:00 a.m.3 views

CVE-2020-5400

Cloud Foundry Cloud Controller CAPI, versions prior to 1.91.0, logs properties of background jobs when they are run, which may include sensitive information such as credentials if provided to the job. A malicious user with access to those logs may gain unauthorized access to resources protected b...

8CVSS7.2AI score0.00753EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/02/19 12:00 a.m.4 views

SQL Injection Vulnerability in SemCMS SE***_Do***.php File

SemCMS is a set of open source foreign trade enterprise website management system, written in php language, can be run under window or linux system. SemCMS SEDo.php file SQL injection vulnerability. Attackers can use the vulnerability to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2020/02/19 12:00 a.m.5 views

SimpleSAMLphp Log Message Disclosure Vulnerability

SimpleSAMLphp is a PHP authentication application that implements the SAML 2.0 Service Provider and Identity Provider features. A log information disclosure vulnerability exists in SimpleSAMLphp. The vulnerability originates from the abnormal output of log files from a web system or product. An...

5.5CVSS6.4AI score0.00653EPSS
SaveExploits0References1
CVE
CVE
added 2020/02/18 1:06 p.m.79 views

CVE-2014-4651

CVE-2014-4651 affects the jclouds scriptbuilder Statements class, which writes a temporary file to a predictable location. This could allow an attacker to access sensitive data, cause a denial of service, or perform other attacks. Public details include a high to critical impact (CVSS v2 base 7.5...

9.8CVSS9.3AI score0.02064EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2020/02/18 12:00 a.m.6 views

SQL injection vulnerability in Zendo Project Management Software co***.php file

Zendo Project Management Software is homegrown open source project management software. Zendo Project Management Software co.php file has a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/02/18 12:00 a.m.6 views

SQL injection vulnerability in In***.php file of MyuCMS open source content management system (CNVD-2020-18786)

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system In.php file SQL injection vulnerability . Attackers can exploit the vulnerability to obtain...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/02/17 12:00 a.m.6 views

PHP Authorization Issues Vulnerability

PHP PHP: Hypertext Preprocessor, PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language jointly maintained by the PHPGroup and the open source community. The language is mainly used for Web development and supports a variety of databases and operating systems. A...

5.9CVSS6.3AI score0.00976EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2020/02/17 12:00 a.m.11 views

PT-2020-6881 · Abb · Abb Esoms

Name of the Vulnerable Software and Affected Versions: ABB eSOMS versions 4.0 to 6.0.3 Description: The issue is related to errors in processing requests, which can allow a remote attacker to disclose protected information. Specifically, HTTPS responses contain comments with sensitive information...

4.3CVSS4.3AI score0.00764EPSS
SaveExploits0References6
CNVD
CNVD
added 2020/02/17 12:00 a.m.3 views

MyuCMS open source content management system suffers from SQL injection vulnerability

MyuCMS open source content management system developed using ThinkPHP community mall aggregation, plug-ins, templates, lightweight and fast easy to expand. MyuCMS open source content management system has a SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive...

7.7AI score
SaveExploits0
zdt
zdt
added 2020/02/14 12:00 a.m.96 views

phpMyChat Plus 1.98 - (pmc_username) SQL Injection Vulnerability

Exploit for php platform in category web applications Title: phpMyChat Plus 1.98 - 'pmcusername' SQL Injection Exploit Author: J3rryBl4nks Vendor Homepage: http://ciprianmp.com/latest/ Software Link: https://sourceforge.net/projects/phpmychat/files/phpMyChatPlus/ Version MyChat Plus 1.98 Tested o...

7.1AI score
SaveExploits0
CNVD
CNVD
added 2020/02/14 12:00 a.m.4 views

SQL Injection Vulnerability in the ad***.php page of the Shipping 100 Virtual Goods Autoship system

Shipping 100 Virtual Goods Autoship System is a virtual goods autoship system/article pay to read system. SQL injection vulnerability exists in the ad.php page of the Shipment 100 virtual goods autoship system, which can be exploited by attackers to obtain sensitive information from the database...

7.5AI score
SaveExploits0
CNVD
CNVD
added 2020/02/14 12:00 a.m.9 views

SQL Injection Bypass Vulnerability in Web Security Dog (Apache Edition)

Website Security Dog is a server security protection software, is for IDC operators, web hosting service providers, enterprise hosts, server administrators and other users to provide server security prevention of the practical system, is a combination of website content security protection, websi...

7.8AI score
SaveExploits0
CNVD
CNVD
added 2020/02/13 12:00 a.m.4 views

SQL Injection Vulnerability in Liangjing Mall Online Shop Shopping System

Liangjing Mall online store shopping system is a set of multi-functional online store system that can fit different types of commodities, super flexible, three-tier distribution PC+mobile+micro-site, which provides a complete online store solution. There is a SQL injection vulnerability in...

7.7AI score
SaveExploits0
CNVD
CNVD
added 2020/02/12 12:00 a.m.3 views

QuickDate SQL Injection Vulnerability

QuickDate is a dating personals social platform. QuickDate suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

7.8AI score
SaveExploits0References1
OSV
OSV
added 2020/02/10 1:15 p.m.8 views

CVE-2019-20060

MFScripts YetiShare v3.5.2 through v4.5.4 places sensitive information in the Referer header. If this leaks, then third parties may discover password-reset hashes, file-delete links, or other sensitive information...

7.5CVSS5.8AI score0.01446EPSS
SaveExploits0References3
CNVD
CNVD
added 2020/02/05 12:00 a.m.3 views

ZhiCms suffers from SQL injection vulnerability (CNVD-2020-10169)

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2020/02/05 12:00 a.m.4 views

SQL Injection Vulnerability in ZhiCms Backend

ZhiCms is a website building system to support the domestic mall Amoy Mall. ZhiCms backend has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

7.8AI score
SaveExploits0
Rows per page
Query Builder