Lucene search
+L

7223 matches found

CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•10 views

OpenLDAP SQL注入漏洞

OpenLDAP is an open source implementation of the Lightweight Directory Access Protocol LDAP from the Openldap Foundation in the United States. A security vulnerability exists in OpenLDAP version 2.x up to and including version 2.5.12, and version 2.6.x up to and including version 2.6.2, which ste...

9.8CVSS7.6AI score0.64487EPSS
SaveExploits1References18
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•13 views

Poultry Farm Management System SQL注入漏洞

Poultry Farm Management System is a full-featured poultry management system.A SQL injection vulnerability exists in Poultry Farm Management System version 1.0, which stems from an SQL injection vulnerability discovered through the Item parameter in /farm/store.php. No detailed vulnerability detai...

8.8CVSS8.1AI score0.01626EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•17 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage health care-related information and helps health care providers do their jobs efficiently. v1.0 of Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers via the patientsearch.php with th...

9.8CVSS8.6AI score0.01442EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/04 12:00 a.m.•20 views

wdja SQL注入漏洞

Wdja is a Php-based content management system from the WDJA team. v2.1 of WDJA is vulnerable to SQL injection, which stems from the impact of a SQL injection vulnerability in the front-end search function. An attacker can exploit the vulnerability for SQL injection...

9.8CVSS8.6AI score0.01086EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/05/03 6:15 p.m.•11 views

CVE-2022-28585

EmpireCMS 7.5 has a SQL injection vulnerability in AdClass.php...

9.8CVSS7.3AI score0.00956EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/03 12:00 a.m.•22 views

Fortinet FortiNAC SQL注入漏洞

Fortinet FortiNAC is a network access control solution from Fortinet, Inc. Fortinet FortiNAC versions 8.3.7 through 9.2.2 are vulnerable to SQL injection, a vulnerability that originates when user-provided data is not sufficiently cleaned and can be exploited to send ad-hoc requests to affected...

8.8CVSS8.4AI score0.00833EPSS
SaveExploits0References3
OSV
OSV
•added 2022/05/02 7:15 p.m.•9 views

CVE-2022-1376

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEprivgrpHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS6AI score
SaveExploits0References1
OSV
OSV
•added 2022/05/02 7:15 p.m.•20 views

CVE-2022-1371

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS6AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/02 7:15 p.m.•20 views

CVE-2022-1375

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in DIAEslogHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.5AI score0.01219EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/02 6:15 p.m.•14 views

CVE-2022-1366

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS7.5AI score0.19345EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/04/29 12:00 a.m.•18 views

Red Planet Laundry Management System SQL注入漏洞

Red Planet Laundry Management System is an application management system. A security vulnerability exists in Red Planet Laundry Management System version 1.0 that stems from vulnerability to SQL injection attacks...

9.8CVSS8.5AI score0.17099EPSS
SaveExploits5References6
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•14 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6AI score0.01219EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•20 views

WordPress plugin Hermit SQL注入漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.The WordPress Hermit plugin 3.1.6 and previous versions are vulnerable to SQL injection, which stems from the la...

8.8CVSS6.1AI score0.00886EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•19 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.01219EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/04/28 12:00 a.m.•18 views

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

10CVSS6.2AI score0.01219EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/04/28 12:00 a.m.•21 views

The vulnerability of the group_list component of the Advantech R-SeeNet monitoring software allows a hacker to execute arbitrary SQL queries.

The vulnerability of the “ord” parameter in the grouplist component of the Advantech R-SeeNet monitoring software for routers is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remote...

9CVSS7.6AI score0.0138EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/04/28 12:00 a.m.•23 views

The vulnerability of the information system openSIS, related to the failure to protect the SQL query structure, allows a perpetrator to execute arbitrary SQL queries.

The vulnerability of the information system openSIS is related to the failure to implement measures to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries using the /opensis/functions/GetStuListFnc.php &Grade= parameter...

9.8CVSS8.2AI score0.01348EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/04/27 12:00 a.m.•26 views

The vulnerability of the implementations of the QuerySet.annotate(), aggregate(), and extra() methods in the Django web application framework allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the implementation of the QuerySet.annotate, aggregate, and extra methods in the Django software platform is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality,...

10CVSS6.6AI score0.18661EPSS
SaveExploits3References10Affected Software6
CNNVD
CNNVD
•added 2022/04/26 12:00 a.m.•15 views

CuppaCMS SQL注入漏洞

CuppaCMS is a content management system CMS. SQL injection vulnerability exists in CuppaCMS v1.0, which originates from the missing validation of external input in the menufilter parameter in /administrator/templates/default/html/windows/right.php. SQL statement validation. An attacker could use...

9.8CVSS6.1AI score0.0678EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/04/26 12:00 a.m.•21 views

HealthNode Hospital Management System SQL注入漏洞

Hospital Management System is a hospital management system. The system includes patient information management, ward management, surgery schedule management and financial management, etc. A SQL injection vulnerability exists in Hospital Management System v1.0, which stems from the lack of...

9.8CVSS6.1AI score0.01575EPSS
SaveExploits1References2
Rows per page
Query Builder