Lucene search
+L

11 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•9 views

CVE-2024-25217: Improper Neutralization of Special Elements used in an SQL Command

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

9.8CVSS5.8AI score0.0069EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/11 12:00 a.m.•18 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file viewproduct.php, where manipulation of the...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/14 12:00 a.m.•5 views

CVE-2022-46120: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/?page=products/viewproduct&id=...

7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/14 12:00 a.m.•6 views

CVE-2022-46117: Improper Neutralization of Special Elements used in an SQL Command

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/?page=viewproduct&id=...

7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•3 views

CVE-2022-32415: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/?p=products/viewproduct&id=...

8.8CVSS7.9AI score0.00969EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•7 views

CVE-2022-32355: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/viewproduct&id=...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
Prion
Prion
•added 2009/09/16 5:30 p.m.•19 views

Sql injection

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

7.5CVSS9.1AI score0.00993EPSS
SaveExploits2References4
NVD
NVD
•added 2009/09/16 5:30 p.m.•22 views

CVE-2009-3205

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

7.5CVSS8.3AI score0.00993EPSS
SaveExploits2References4
CVE
CVE
•added 2009/09/16 5:00 p.m.•57 views

CVE-2009-3205

The CVE-2009-3205 entry concerns an SQL injection vulnerability in CBAuthority’s main.php, exploitable through the id parameter in a view_product action. The underlying flaw allows remote attackers to alter the SQL executed by the application, leading to potential arbitrary SQL execution with the...

7.5CVSS8.3AI score0.00993EPSS
SaveExploits2References4Affected Software1
Cvelist
Cvelist
•added 2009/09/16 5:00 p.m.•35 views

CVE-2009-3205

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

8.3AI score0.00993EPSS
SaveExploits2References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/16 12:00 a.m.•8 views

CVE-2009-3205: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in main.php in CBAuthority allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewproduct action...

7.5CVSS6.4AI score0.00993EPSS
SaveExploits2References2
Rows per page
Query Builder