Lucene search
+L

13559 matches found

CNVD
CNVD
added 2022/05/16 12:00 a.m.42 views

Simple Client Management System SQL注入漏洞(CNVD-2022-57776)

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteservice, the id parameter of the...

9.8CVSS4.4AI score0.01583EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/16 12:00 a.m.45 views

Online Sports Complex Booking System SQL注入漏洞(CNVD-2022-58674)

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletebooking, the id parameter of the pos...

9.8CVSS4.2AI score0.01124EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/16 12:00 a.m.29 views

Simple Client Management System SQL注入漏洞(CNVD-2022-57771)

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to a SQL injection vulnerability that originates in /cms/admin/?page=user/ The vulnerability is caused by the lack of validati...

9.8CVSS5AI score0.01583EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/16 12:00 a.m.73 views

Online Sports Complex Booking System SQL注入漏洞(CNVD-2022-58670)

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. page=user/manageuser&id= lacks validation of external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data...

9.8CVSS5.2AI score0.01124EPSS
SaveExploits1References1
CNVD
CNVD
added 2022/05/16 12:00 a.m.44 views

Online Sports Complex Booking System SQL注入漏洞(CNVD-2022-58676)

Online Sports Complex Booking System is an online stadium booking system by Carlo Montero, a personal developer. Online Sports Complex Booking System version 1.0 is vulnerable to a SQL injection vulnerability that originates in scbs/classes/ Master.php?f=deletefacility, the id parameter of the po...

9.8CVSS4.1AI score0.01124EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2022/05/14 3:52 a.m.19 views

Dolibarr SQL injection vulnerability in comm/multiprix.php

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

9.8CVSS9AI score0.01871EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:52 a.m.36 views

GHSA-9V7M-F3CV-68RW Dolibarr SQL injection vulnerability in comm/multiprix.php

SQL injection vulnerability in comm/multiprix.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the id parameter...

9.8CVSS9.9AI score0.01871EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:51 a.m.27 views

Dolibarr SQL injection vulnerability in fourn/index.php

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

9.8CVSS9AI score0.01871EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:51 a.m.25 views

Dolibarr SQL injection vulnerability in adherents/subscription/info.php

SQL injection vulnerability in adherents/subscription/info.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the rowid parameter...

9.8CVSS9AI score0.01871EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:51 a.m.12 views

GHSA-6FRC-VFW9-WM27 Dolibarr SQL injection vulnerability in fourn/index.php

SQL injection vulnerability in fourn/index.php in Dolibarr ERP/CRM version 6.0.4 allows remote attackers to execute arbitrary SQL commands via the socid parameter...

9.8CVSS9.9AI score0.01871EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/14 3:08 a.m.40 views

GHSA-M5RG-G6F9-8WPW Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS9.9AI score0.01918EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:08 a.m.21 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

9.8CVSS9AI score0.01918EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:08 a.m.25 views

GHSA-JJQQ-M998-53JF Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS9.9AI score0.01937EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 3:08 a.m.25 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statut parameter...

9.8CVSS9AI score0.01937EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/05/14 3:00 a.m.26 views

Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS9AI score0.01918EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 3:00 a.m.70 views

GHSA-24Q2-6X37-CGCX Dolibarr SQL injection vulnerability in product/card.php

SQL injection vulnerability in product/card.php in Dolibarr ERP/CRM version 7.0.3 allows remote attackers to execute arbitrary SQL commands via the statusbatch parameter...

9.8CVSS9.9AI score0.01918EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/05/14 1:42 a.m.22 views

Dolibarr error-based SQL injection vulnerability in product/card.php

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...

8.8CVSS8.5AI score0.02032EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2022/05/14 1:42 a.m.34 views

GHSA-78HJ-952Q-99RW Dolibarr error-based SQL injection vulnerability in product/card.php

An error-based SQL injection vulnerability in product/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the desiredstock parameter...

8.8CVSS8.8AI score0.02032EPSS
SaveExploits0References3
OSV
OSV
added 2022/05/14 1:41 a.m.22 views

GHSA-97JV-2HP6-3FRJ Dolibarr SQL injection vulnerability in user/card.php

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

8.8CVSS8.8AI score0.02212EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2022/05/14 1:41 a.m.32 views

Dolibarr SQL injection vulnerability in user/card.php

SQL injection vulnerability in user/card.php in Dolibarr version 8.0.2 allows remote authenticated users to execute arbitrary SQL commands via the employee parameter...

8.8CVSS8.5AI score0.02212EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder