Lucene search
+L

7 matches found

Prion
Prion
•added 2023/01/16 12:15 p.m.•29 views

Sql injection

A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function getinfo/getcountrycoor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is...

7.5CVSS9.7AI score0.00667EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2023/01/16 11:58 a.m.•2 views

CVE-2021-4313

A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function getinfo/getcountrycoor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is...

9.8CVSS0.00667EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/16 12:00 a.m.•6 views

CVE-2021-4313: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in NethServer phonenehome. It has been rated as critical. This issue affects the function getinfo/getcountrycoor of the file server/index.php. The manipulation leads to sql injection. The identifier of the patch is 759c30b0ddd7d493836bbdf695cf71624b377391. It is...

9.8CVSS5.3AI score0.00667EPSS
SaveExploits0References3
CNVD
CNVD
•added 2021/12/02 12:00 a.m.•93 views

showdoc Cross-site Request Forgery Vulnerability (CNVD-2021-94821)

showdoc is an open source tool for IT teams to share documents online. showdoc is vulnerable to cross-site request forgery, which can be exploited by attackers via "/server/index.php?s=/api/itemGroup/save"...

8.8CVSS4.2AI score0.00616EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/11/28 12:00 a.m.•4 views

PT-2018-15023

Name of the Vulnerable Software and Affected Versions ShowDoc version 2.4.2 Description The issue allows for a CSRF attack, which can be used to add members to a team. The affected endpoint is "server/index.php?s=/api/teamMember/save". This can potentially lead to unauthorized modifications to te...

6.5CVSS0.00447EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/28 12:00 a.m.•8 views

CVE-2018-19621: Cross-Site Request Forgery (CSRF)

server/index.php?s=/api/teamMember/save in ShowDoc 2.4.2 has a CSRF that can add members to a team...

6.5CVSS6.6AI score0.00447EPSS
SaveExploits1References2
zdt
zdt
•added 2009/12/22 12:00 a.m.•76 views

weenCompany SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================= weenCompany SQL Injection Vulnerability ======================================= weenCompany SQL Injection Vulnerability Vendor: http://www.weentech.com/ Author: Gamoscu Dork:"Created by weenCompany"...

7.1AI score
SaveExploits0
Rows per page
Query Builder