Lucene search
+L

7223 matches found

CNVD
CNVD
•added 2019/04/20 12:00 a.m.•12 views

SQL Injection Vulnerability in Website Building System of Ningbo Mufeng Network Technology Co.

Ningbo Mufeng Network Technology Co., Ltd. is a website design company with the core business of website construction, website production, website development, graphic design and corporate branding in Ningbo. There is a SQL injection vulnerability in the website building system of Ningbo Mufeng...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/04/12 12:00 a.m.•11 views

Heilongjiang Yitong Network Technology Development Co., Ltd. website building system has SQL injection vulnerability

Heilongjiang Yitong Network Technology Development Co., Ltd. is an enterprise website building system. There is a SQL injection vulnerability in Heilongjiang Yitong Network Technology Development Co., Ltd. that can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/04/12 12:00 a.m.•41 views

Magento SQL Injection Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A SQL injection vulnerability exists in Magento, which stems from a lack of validation of externally entered SQL...

9.8CVSS8.2AI score0.18336EPSS
SaveExploits2References1
CNVD
CNVD
•added 2019/04/04 12:00 a.m.•16 views

MKCMS SQL Injection Vulnerability

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V5.0. The vulnerability stems from a lack of validation of externally entered SQL statements in database-based applications. An attacker can exploit this vulnerability to execute illegal SQL commands...

9.8CVSS8.2AI score0.01464EPSS
SaveExploits1References1
OSV
OSV
•added 2019/04/03 12:00 a.m.•16 views

UBUNTU-CVE-2018-20505

SQLite 3.25.2, when queries are run on a table with a malformed PRIMARY KEY, allows remote attackers to cause a denial of service application crash by leveraging the ability to run arbitrary SQL statements such as in certain WebSQL use cases...

7.5CVSS7AI score0.06952EPSS
SaveExploits1References22
OSV
OSV
•added 2019/04/02 7:29 p.m.•13 views

CVE-2019-10707

MKCMS V5.0 has SQL injection via the bplay.php play parameter...

9.8CVSS7.3AI score0.01464EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/04/01 12:00 a.m.•84 views

Domoticz SQL Injection Vulnerability

Domoticz is an open source smart home system. The system supports monitoring and controlling a wide range of smart home devices. A SQL injection vulnerability exists in Domoticz versions prior to 4.10578, which stems from a lack of validation of externally entered SQL statements in database-based...

9.8CVSS8.2AI score0.08185EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
•added 2019/03/29 12:00 a.m.•13 views

The vulnerability of the pg_upgrade and pg_dump utilities in the PostgreSQL database management system allows a hacker to execute arbitrary SQL commands.

The vulnerability of the pgupgrade and pgdump utilities in the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL commands remotely...

9.8CVSS7.9AI score0.0515EPSS
SaveExploits0References9Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/03/29 12:00 a.m.•10 views

The vulnerability of the PQescape() function in the libpq library of the PostgreSQL database management system allows a hacker to disclose sensitive information that is protected by this function.

The vulnerability of the PQescape function in the libpq library of the PostgreSQL database management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to disclose protected information through SQL injections...

8.5CVSS7.3AI score0.05154EPSS
SaveExploits0References18Affected Software2
OSV
OSV
•added 2019/03/26 5:29 p.m.•10 views

CVE-2019-9053

An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1idlist parameter...

8.1CVSS7.3AI score0.68581EPSS
SaveExploits39References5
CNVD
CNVD
•added 2019/03/25 12:00 a.m.•6 views

SQL Injection Vulnerability in Leer's Resource Platform

Founded in 2008, Aotong Dalian Technology Development Co., Ltd. is an educational brand engaged in the research and development of original children's digital resources. A SQL injection vulnerability exists in the Le'er Resource Platform, which can be exploited by an attacker to obtain sensitive...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/19 12:00 a.m.•7 views

SQL Injection Vulnerability in NetSoft Zhicheng Classifieds Website System

NetSoft Zhicheng classifieds website system is a php mysql based website building system. Netsoft Zhicheng classifieds website system has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information in the database...

7.6AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/15 12:00 a.m.•8 views

SQL Injection Vulnerability in the jdo*** Component jdo*** Module of joomla!

joomla! is an open source content management system CMS. A SQL injection vulnerability exists in the jdo module of the joomla! jdo component. The vulnerability allows attackers to obtain sensitive information about the database...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/13 12:00 a.m.•14 views

Hsycms v1.1 suffers from SQL Injection Vulnerability

Hsycms is an enterprise-level web content management system, written by PHP+MYSQL, using template separation technology to support the creation of many types of sites. Hsycms v1.1 suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database...

7.8AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/12 12:00 a.m.•9 views

SQL Injection Vulnerability in 74cms in***.php Page

Knight Talent System 74cms is a talent recruitment system based on PHP+MYSQL. A SQL injection vulnerability exists in the 74cms in.php page, which can be exploited by attackers to obtain sensitive information...

7.9AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/11 12:00 a.m.•8 views

SQL Injection Vulnerability in Website Management System of Suzhou Topps Network Technology Co.

Suzhou Topps Network Technology, one-stop solution for website construction program. Suzhou Topps Network Technology Co., Ltd. website building system exists SQL injection vulnerability, allowing attackers to utilize commonly used SQL injection tools, access to sensitive information in the...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/08 12:00 a.m.•5 views

SQL Injection Vulnerability in OFCMS System Management Service

OFCMS is a content management system developed based on java technology. A SQL injection vulnerability exists in the OFCMS system administration, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
OSV
OSV
•added 2019/03/05 6:29 p.m.•15 views

CVE-2019-4032

IBM Financial Transaction Manager for Digital Payments for Multi-Platform 3.1.0 is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-ForceID: 155998...

9.8CVSS6.8AI score0.01551EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2019/03/05 12:00 a.m.•13 views

PT-2019-16850 · Ibm · Ibm Financial Transaction Manager For Digital Payments For Multi-Platform

Name of the Vulnerable Software and Affected Versions: IBM Financial Transaction Manager for Digital Payments for Multi-Platform version 3.1.0 Description: The issue allows a remote attacker to send specially-crafted SQL statements, which could enable the attacker to view, add, modify, or delete...

9.8CVSS6.8AI score0.01551EPSS
SaveExploits0References4
CNVD
CNVD
•added 2019/03/04 12:00 a.m.•6 views

SQL Injection Vulnerability in Super CMS Frontend in***.php Page

Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...

7.7AI score
SaveExploits0
Rows per page
Query Builder