Lucene search
+L

15504 matches found

zdt
zdt
•added 2016/10/03 12:00 a.m.•285 views

BalkanSys CMS show_pageID SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title : BalkanSys CMS showpageID SQL injection Exploit Author : xBADGIRL21 Dork : inurl:/?act=showpage or inurl:/?act=showpage "Balkansys" Category: Webapps version: BalkanSys CMS 2.x - 3.x Tested on: Linux | Windows Vendore :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2016/09/19 12:00 a.m.•62 views

MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities

MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet and...

0.4AI score
SaveExploits0
zdt
zdt
•added 2016/09/19 12:00 a.m.•51 views

MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities

Exploit for asp platform in category web applications Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2016/09/19 12:00 a.m.•58 views

MuM MapEdit 3.2.6.0 - Multiple Vulnerabilities

Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet and intranets and is deployed on several communal and...

5.3AI score
SaveExploits0
UbuntuCve
UbuntuCve
•added 2016/09/17 2:59 a.m.•47 views

CVE-2016-5843

Multiple SQL injection vulnerabilities in the FAQ package 2.x before 2.3.6, 4.x before 4.0.5, and 5.x before 5.0.5 in Open Ticket Request System OTRS allow remote attackers to execute arbitrary SQL commands via crafted search parameters...

9.4CVSS7.5AI score0.03209EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2016/09/17 12:00 a.m.•10 views

PT-2016-6711

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions 2.x through 2.3.5 Open Ticket Request System OTRS versions 4.x through 4.0.4 Open Ticket Request System OTRS versions 5.x through 5.0.4 Description The issue allows remote attackers to execute arbitrary...

9.4CVSS0.03209EPSS
SaveExploits0References9
Packet Storm
Packet Storm
•added 2016/09/14 12:00 a.m.•63 views

MuM Map Edit 3.2.6.0 SQL Injection / File Manipulation / Poor Practices

Security Advisory -- Multiple Vulnerabilities - MuM Map Edit Product Vendor: Mensch und Maschine Software SE / Mensch und Maschine acadGraph GmbH Product: MapEdit Affected software version: 3.2.6.0 MuM MapEdit provides geodata to the internet and intranets and is deployed on several communal and...

0.1AI score
SaveExploits0
Patchstack
Patchstack
•added 2016/09/11 12:00 a.m.•27 views

WordPress MailPoet Newsletters Plugin <= 2.7.2 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

5.8AI score
SaveExploits0References1Affected Software1
osv_dla
osv_dla
•added 2016/08/31 12:00 a.m.•54 views

DLA-560-2 cacti - regression update

Bulletin has no description...

8.8AI score
SaveExploits0
Cvelist
Cvelist
•added 2016/08/30 7:00 p.m.•93 views

CVE-2016-6195

SQL injection vulnerability in forumrunner/includes/moderation.php in vBulletin before 4.2.2 Patch Level 5 and 4.2.3 before Patch Level 1 allows remote attackers to execute arbitrary SQL commands via the postids parameter to forumrunner/request.php, as exploited in the wild in July 2016...

10AI score0.70914EPSS
SaveExploits8References4
Prion
Prion
•added 2016/08/26 7:59 p.m.•31 views

Sql injection

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

7.5CVSS9AI score0.01885EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2016/08/26 7:00 p.m.•51 views

CVE-2016-5048

SQL injection vulnerability in chat/staff/default.aspx in ReadyDesk 9.1 allows remote attackers to execute arbitrary SQL commands via the user name field...

10AI score0.01885EPSS
SaveExploits0References2
CVE
CVE
•added 2016/08/22 10:00 a.m.•78 views

CVE-2016-5817

Navis WebAccess (Navis, a Navis/Navis, Inc. product) is affected by CVE-2016-5817, a SQL injection vulnerability in news pages that allowed remote attackers to execute arbitrary SQL via unspecified vectors. The vulnerability targets WebAccess versions prior to the August 10, 2016 patch release; N...

9.8CVSS9.8AI score0.01396EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2016/08/08 12:59 a.m.•26 views

CVE-2016-5792

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

9.8CVSS6.1AI score0.03037EPSS
SaveExploits0References3
NVD
NVD
•added 2016/08/08 12:59 a.m.•26 views

CVE-2016-5792

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

9.8CVSS10AI score0.03037EPSS
SaveExploits0References3
Prion
Prion
•added 2016/08/08 12:59 a.m.•23 views

Sql injection

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

7.5CVSS9AI score0.03037EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/08/08 12:00 a.m.•13 views

CVE-2016-5792: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Moxa SoftCMS before 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified fields...

9.8CVSS8.7AI score0.03037EPSS
SaveExploits0References2
NVD
NVD
•added 2016/08/05 3:59 p.m.•54 views

CVE-2016-4999

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the 1 Data Set Authoring or 2...

9.8CVSS9.9AI score0.03653EPSS
SaveExploits0References6
Prion
Prion
•added 2016/08/05 3:59 p.m.•44 views

Sql injection

SQL injection vulnerability in the getStringParameterSQL method in main/java/org/dashbuilder/dataprovider/sql/dialect/DefaultDialect.java in Dashbuilder before 0.6.0.Beta1 allows remote attackers to execute arbitrary SQL commands via a data set lookup filter in the 1 Data Set Authoring or 2...

7.5CVSS8.9AI score0.03653EPSS
SaveExploits0References6Affected Software3
CNVD
CNVD
•added 2016/08/04 12:00 a.m.•20 views

Huge-IT Portfolio Gallery manager SQL Injection Vulnerability

Huge-IT Portfolio Gallery manager is Huge-IT team developed an extension plugin for Joomla! in the management and display of photos, videos and so on. A SQL injection vulnerability exists in Huge-IT Portfolio Gallery manager v1.1.5. An attacker can exploit this vulnerability to inject arbitrary S...

7.2CVSS8.1AI score0.02103EPSS
SaveExploits1References1
Rows per page
Query Builder