Lucene search
+L

172 matches found

CVE
CVE
•added 2023/01/27 12:00 a.m.•84 views

CVE-2022-44298

SiteServer CMS 7.1.3 is affected by a SQL Injection vulnerability. The issue affects the product as described in multiple sources, with a high-severity score and a remote, network-exposed risk. One documented vector notes exploitation via the api/admin/settings/sitesTables/ endpoint, potentially ...

9.8CVSS9.5AI score0.00741EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/01/27 12:00 a.m.•17 views

SiteServer CMS SQL注入漏洞

SiteServer CMS is an open-source content management system CMS from China's BioRenewable Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection...

9.8CVSS8.7AI score0.00741EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/27 12:00 a.m.•45 views

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

9.9AI score0.00741EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/01/27 12:00 a.m.•3 views

PT-2023-14446

Name of the Vulnerable Software and Affected Versions SiteServer CMS version 7.1.3 Description The issue is related to SQL Injection. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...

9.8CVSS0.00741EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/27 12:00 a.m.•3 views

CVE-2022-44298: Improper Neutralization of Special Elements used in an SQL Command

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

9.8CVSS5.8AI score0.00741EPSS
SaveExploits1References3
OSV
OSV
•added 2023/01/27 12:00 a.m.•19 views

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

9.8CVSS9.7AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2023/01/27 12:00 a.m.•17 views

CVE-2022-44298

SiteServer CMS 7.1.3 is vulnerable to SQL Injection...

9.9AI score0.00741EPSS
SaveExploits1References1
NVD
NVD
•added 2023/01/26 9:17 p.m.•30 views

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

9.8CVSS9.8AI score0.00972EPSS
SaveExploits1References1
Prion
Prion
•added 2023/01/26 9:17 p.m.•26 views

Sql injection

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

7.5CVSS9.7AI score0.00972EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/01/26 12:00 a.m.•41 views

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

10AI score0.00972EPSS
SaveExploits1References1
OSV
OSV
•added 2023/01/26 12:00 a.m.•20 views

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

9.8CVSS9.8AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2023/01/26 12:00 a.m.•14 views

SiteServer CMS SQL注入漏洞

SiteServer CMS is an open source content management system CMS developed by China Billion Software Technology Development Company. A security vulnerability exists in SiteServer CMS version 7.1.3, which is caused by SQL injection in the backend...

9.8CVSS8.7AI score0.00972EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/01/26 12:00 a.m.•12 views

CVE-2022-44297

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

9.8AI score0.00972EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/26 12:00 a.m.•4 views

CVE-2022-44297: Improper Neutralization of Special Elements used in an SQL Command

SiteServer CMS 7.1.3 has a SQL injection vulnerability the background...

9.8CVSS5.8AI score0.00972EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/26 12:00 a.m.•67 views

CVE-2022-44297

SiteServer CMS 7.1.3 contains a backend SQL injection vulnerability. The CVE entry lists a critical impact (CVSS v3.1: 9.8) with network attack vector, no authentication, and full confidentiality, integrity, and availability impacts, as described in the initial data. Connected documents do not pr...

9.8CVSS9.7AI score0.00972EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•5 views

CVE-2022-36226: Missing Authorization

SiteServerCMS 5.X has a Remote-download-Getshell-vulnerability via /SiteServer/Ajax/ajaxOtherService.aspx...

7.2CVSS7.2AI score0.01094EPSS
SaveExploits1References2
NVD
NVD
•added 2022/06/02 2:15 p.m.•34 views

CVE-2022-30349

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...

6.1CVSS0.00675EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•5 views

CVE-2022-30349

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...

6.1CVSS6.4AI score0.00675EPSS
SaveExploits1References2
CVE
CVE
•added 2022/05/27 5:20 p.m.•100 views

CVE-2022-30349

CVE-2022-30349 affects SiteServer SSCMS 6.15.51. A cross-site scripting (XSS) vulnerability arises from insufficient sanitization of user-supplied data in the modalRelatedFieldItemEdit.aspx script (per CNNVD report). Several connected records (Red Hat, GitHub advisories, OSV, CVE listings, and Ne...

6.1CVSS6AI score0.00675EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/05/27 5:20 p.m.•20 views

CVE-2022-30349

siteserver SSCMS 6.15.51 is vulnerable to Cross Site Scripting XSS...

6.1AI score
SaveExploits0References3
Rows per page
Query Builder