Lucene search
K

7 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 6:1 a.m.3 views

SUSE CVE-2009-4605

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

5CVSS7AI score0.0236EPSS
Exploits1References4
NVD
NVD
added 2022/05/16 1:15 p.m.12 views

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

7.5CVSS0.01676EPSS
Exploits1References2
Prion
Prion
added 2022/05/16 1:15 p.m.12 views

Sql injection

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

5CVSS8.1AI score0.01676EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/05/16 12:51 p.m.19 views

CVE-2022-30012

In the POST request of the appointment.php page of HMS v.0, there are SQL injection vulnerabilities in multiple parameters, and database information can be obtained through injection...

8.4AI score0.01676EPSS
Exploits1References2
CVE
CVE
added 2022/05/16 12:51 p.m.68 views

CVE-2022-30012

The CVE-2022-30012 entry affects HMS v.0. In the POST request to appointment.php, multiple parameters expose SQL injection vulnerabilities that can disclose database information. The issue is documented across CVE/NVD entries and corroborated by CNVD/Red Hat/CNVD entries, all stating SQL injectio...

7.5CVSS8.1AI score0.01676EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2010/01/19 4:30 p.m.21 views

Cross site request forgery (csrf)

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

5CVSS6.8AI score0.0236EPSS
Exploits1References8Affected Software1
OSV
OSV
added 2010/01/19 4:30 p.m.5 views

CVE-2009-4605

scripts/setup.php aka the setup script in phpMyAdmin 2.11.x before 2.11.10 calls the unserialize function on the values of the 1 configuration and 2 v0 parameters, which might allow remote attackers to conduct cross-site request forgery CSRF attacks via unspecified vectors...

6.5AI score
Exploits0References8
Rows per page
Query Builder