Lucene search
+L

13559 matches found

Cvelist
Cvelist
added 2020/02/06 9:59 p.m.52 views

CVE-2013-3638

SQL injection vulnerability in Boonex Dolphin before 7.1.3 allows remote authenticated users to execute arbitrary SQL commands via the 'pathes' parameter in 'categories.php'...

8.9AI score0.0141EPSS
SaveExploits1References2
NVD
NVD
added 2020/01/31 9:15 p.m.13 views

CVE-2014-3119

Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...

8.8CVSS9.1AI score0.01731EPSS
SaveExploits5References3
Prion
Prion
added 2020/01/31 9:15 p.m.18 views

Sql injection

Multiple SQL injection vulnerabilities in web2Project 3.1 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 searchstring parameter in the contacts module to index.php or allow remote attackers to execute arbitrary SQL commands via the updatekey parameter to ...

6.5CVSS8.7AI score0.01731EPSS
SaveExploits5References3Affected Software1
Prion
Prion
added 2020/01/30 8:15 p.m.16 views

Sql injection

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

7.5CVSS9.2AI score0.0199EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2020/01/30 7:03 p.m.22 views

CVE-2014-3719

Multiple SQL injection vulnerabilities in cgi-bin/reviewm.cgi in Ex Libris ALEPH 500 Integrated library management system 18.1 and 20 allow remote attackers to execute arbitrary SQL commands via the 1 find, 2 lib, or 3 sid parameter...

10AI score0.0199EPSS
SaveExploits2References2
Prion
Prion
added 2020/01/24 5:15 p.m.23 views

Sql injection

SQL injection vulnerability in the MARC framework import/export function admin/importexportframework.pl in Koha before 3.8.23, 3.10.x before 3.10.13, 3.12.x before 3.12.10, and 3.14.x before 3.14.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. NOTE:...

7.5CVSS9.4AI score0.02038EPSS
SaveExploits2References4Affected Software1
Packet Storm
Packet Storm
added 2020/01/24 12:00 a.m.192 views

Webtareas 2.0 SQL Injection

Exploit Title: Webtareas 2.0 - 'id' SQL Injection Date: 2020-01-23 Exploit Author: Greg.Priest Vendor Homepage: http://webtareas.sourceforge.net/general/home.php Software Link: http://webtareas.sourceforge.net/general/home.php Version: Webtareas v2.0 Tested on: Windows CVE : N/A Webtareas v2.0...

0.1AI score
SaveExploits0
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.37 views

Huawei EulerOS: Security Advisory for sqlite (EulerOS-SA-2019-1152)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS8.2AI score0.1197EPSS
SaveExploits1References2
NVD
NVD
added 2020/01/09 8:15 p.m.20 views

CVE-2012-1259

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

9.8CVSS10AI score0.04247EPSS
SaveExploits7References5
Prion
Prion
added 2020/01/09 8:15 p.m.17 views

Sql injection

Multiple SQL injection vulnerabilities in Plixer International Scrutinizer NetFlow & sFlow Analyzer 8.6.2.16204, and possibly other versions before 9.0.1.19899, allow remote attackers to execute arbitrary SQL commands via the 1 addip parameter to cgi-bin/scrutfaexclusions.cgi, 2...

7.5CVSS9.2AI score0.04247EPSS
SaveExploits7References5Affected Software1
OSV
OSV
added 2020/01/06 8:15 a.m.10 views

CVE-2019-15985

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS7.4AI score0.03304EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2020/01/06 7:45 a.m.13 views

CVE-2019-15985 Cisco Data Center Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS8.1AI score0.03304EPSS
SaveExploits0References1
CNVD
CNVD
added 2020/01/03 12:00 a.m.14 views

Cisco Data Center Network Manager SOAP API SQL Injection Vulnerability

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A SOAP API SQL injection vulnerability exists in Cisco Data Center Network Manager...

9CVSS8.3AI score0.03304EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/02 8:15 p.m.21 views

CVE-2013-3932

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

8.8CVSS8.8AI score0.01758EPSS
SaveExploits0References3
Prion
Prion
added 2020/01/02 8:15 p.m.20 views

Sql injection

SQL injection vulnerability in the Jomres comjomres component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php...

6.5CVSS8.6AI score0.01758EPSS
SaveExploits0References3Affected Software1
Cisco
Cisco
added 2020/01/02 4:00 p.m.130 views

Cisco Data Center Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the REST and SOAP API endpoints of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. To exploit these vulnerabilities, an attacker would need administrative privileges on the DC...

7.2CVSS1.4AI score0.46935EPSS
SaveExploits10References1
Cvelist
Cvelist
added 2019/12/31 8:42 p.m.31 views

CVE-2015-5591

SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands...

7.5AI score0.02238EPSS
SaveExploits2References4
Cvelist
Cvelist
added 2019/12/26 3:16 p.m.33 views

CVE-2019-6012

SQL injection vulnerability in the wpDataTables Lite Version 2.0.11 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

7.2AI score0.01447EPSS
SaveExploits0References2
Cloud Foundry
Cloud Foundry
added 2019/12/18 12:00 a.m.141 views

USN-4205-1: SQLite vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Description It was discovered that SQLite incorrectly handled certain schemas. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 12.04 ESM...

8.8CVSS8.6AI score0.07498EPSS
SaveExploits2
Prion
Prion
added 2019/12/09 8:15 p.m.17 views

Sql injection

SQL injection vulnerability in Accentis Content Resource Management System before the October 2015 patch allows remote attackers to execute arbitrary SQL commands via the SIDX parameter...

6.5CVSS9AI score0.01566EPSS
SaveExploits2References1Affected Software1
Rows per page
Query Builder