Lucene search
+L

8425 matches found

CNNVD
CNNVD
added 2023/08/09 12:00 a.m.10 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00719EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.10 views

PT-2023-15858 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "json walker" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary SQL that i...

8.8CVSS8.8AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.9 views

PT-2023-15861 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporting job editor” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL...

8.8CVSS8.8AI score0.00734EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.12 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.12 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.11 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.10 views

PT-2023-15871 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the “reporter events type” feature of the ScienceLogic SL1. This feature takes unsanitized user-controlled input and passes it directly to a SQL...

8.8CVSS8.8AI score0.00734EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.14 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.5 views

Gym Management System SQL Injection Vulnerability

Gym Management System is a gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore. A security vulnerability...

9.8CVSS8.2AI score0.0116EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.11 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.10 views

PT-2023-15867 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "ticket template watchers" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitra...

8.8CVSS8.9AI score0.00734EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.12 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/09 12:00 a.m.10 views

ScienceLogic SL1 SQL注入漏洞

ScienceLogic SL1 is an application from ScienceLogic, Inc. Connect your real estate together to automate multidirectional data flow and workflow. A SQL injection vulnerability exists in ScienceLogic SL1 11.1.2 and earlier versions, which stems from a lack of validation of externally entered SQL...

8.8CVSS8.1AI score0.00734EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/08/09 12:00 a.m.9 views

PT-2023-15874 · Sciencelogic · Sciencelogic Sl1

Name of the Vulnerable Software and Affected Versions: ScienceLogic SL1 affected versions not specified Description: A SQL injection issue exists in the "message viewer print" feature, where unsanitized user-controlled input is passed directly to a SQL query, allowing the injection of arbitrary S...

8.8CVSS8.9AI score0.00734EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2023/08/08 4:15 p.m.11 views

CVE-2023-38760

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryView.php component...

7.5CVSS5.8AI score0.00971EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/08 1:15 a.m.12 views

CVE-2023-33993

B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or modify the SQL data. On successful exploitation, the attacker can cause high impact on confidentiality, integrity and availability of the...

7.5CVSS5.8AI score0.00576EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.10 views

ChurchCRM SQL Injection Vulnerability

ChurchCRM is an open source CRM system for churches. A security vulnerability exists in ChurchCRM version v.5.0.0 that stems from the presence of a SQL injection vulnerability...

7.5CVSS7.9AI score0.00971EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.10 views

a2 License Portal System SQL Injection Vulnerability

a2 License Portal System is a license portal system from a2 License Portal System, Inc. A SQL injection vulnerability exists in a2 License Portal System versions prior to 1.48, which arises from incorrect neutralization of special elements used in SQL commands...

9.8CVSS7.9AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.10 views

Oduyo Online Collection Software SQL Injection Vulnerability

Oduyo Online Collection Software is a software from Oduyo, Inc. Oduyo Online Collection Software before 1.0.1 suffers from a SQL injection vulnerability that stems from incorrect neutralization of special elements used in SQL commands...

9.8CVSS8AI score0.00626EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/08/08 12:00 a.m.13 views

mAyaNet E-Commerce SQL Injection Vulnerability

mAyaNet E-Commerce is an e-commerce platform from mAyaNet, Inc. A SQL injection vulnerability exists in mAyaNet E-Commerce versions prior to 1.1, which stems from incorrect neutralization of special elements used in SQL commands...

9.8CVSS7.9AI score0.00626EPSS
SaveExploits0References2
Rows per page
Query Builder