5943 matches found
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. The vulnerability can be exploited to insert malicious SQL queries via email parameters...
Sourcecodesterk Doctor Appointment System SQL注入漏洞
Doctor Appointment System is a PHP/MySQLi based doctor appointment system. A SQL blind injection vulnerability exists in contactus.php in Doctor Appointment System 1.0. An attacker can exploit this vulnerability to insert malicious SQL queries via the firstname parameter...
Cisco SD-WAN vManage 输入验证错误漏洞
Cisco SD-WAN vManage is a software from Cisco that provides software-defined networking capabilities. The software provides a way to virtualize the network. An input validation error vulnerability exists in Cisco SD-WAN vManage, which is caused by improper validation of SQL query inputs on affect...
Nsf bmpanel2 SQL注入漏洞
Nsf bmpanel2 is Nsf an open source application . It provides a NETWM compatible panel for X11. A SQL injection vulnerability exists in bmpanel2, which is accessible without authentication and allows SQL injection...
CVE-2020-36003
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases...
CVE-2021-22854
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege...
CVE-2021-22856
The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege...
CGE property management system SQL injection vulnerability
CGE property management system is an application software from CGE China. It provides a system for financial management. A SQL injection vulnerability exists in the CGE property management system, which arises from a lack of validation of externally-entered SQL statements in a database-based...
UBUNTU-CVE-2020-22425
Centreon 19.10-3.el7 is affected by a SQL injection vulnerability, where an authorized user is able to inject additional SQL queries to perform remote command execution...
Sourcecodester Pisay Online E-Learning System SQL注入漏洞
Sourcecodester Pisay Online E-Learning System is an online e-learning system based on PHP and MySQL. Sourcecodester Pisay Online E-Learning System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in a database-based...
Mutare Voice SQL Injection Vulnerability
A SQL injection vulnerability exists in Mutare Voice that stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...
LimeSurvey SQL Injection Vulnerability
LimeSurvey formerly known as PHPSurveyor is an open source online survey program from the LimeSurvey Limesurvey team that supports survey program development, survey distribution, and data collection. A SQL injection vulnerability exists in LimeSurvey that stems from a lack of validation of...
Advantech Iview SQL注入漏洞
Advantech iView is a device management application for the energy, water and wastewater industries. A SQL injection vulnerability exists in Advantech iView versions prior to 5.7.03.6112. An attacker can exploit this vulnerability to elevate privileges to "Administrator"...
PHPSHE SQL注入漏洞
PHPSHE is a set of online shopping mall system of China Lingbao Jane Hao Network Technology PHPSHE Company. The system supports express tracking, online chat, order evaluation and statistics and other functions. A SQL injection vulnerability exists in PHPSHE, which stems from the lack of validati...
The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.
The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
The vulnerability of the REST API implementation of the network management system’s data center management module allows a attacker to execute arbitrary SQL commands.
The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...
Oliver Lando College-Management-System-Php SQL Injection Vulnerability
Oliver Lando College-Management-System-Php is a college management system organized by Oliver Lando Personal Organization in Kenya. This College Management System is an Internet-based Web portal designed to provide information for all management systems of the college. College Management System P...
The vulnerability in the web interface of the Cisco Unified Communications Manager IM & Presence Service allows a perpetrator to execute arbitrary SQL queries.
The vulnerability of the Web interface for managing the Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P is related to input validation errors. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...
RockOA SQL注入漏洞
RockOA Xinhuo is an open source office OA system. Rockoa v1.8.7 version of the existence of SQL injection vulnerability , the vulnerability wordModel.php parameters in the user input is not effectively filtered , a remote attacker through the injection of SQL statements to execute the acquisition...