16621 vulnerabilidades · Database Orden: CVSS EPSS Año ID
CVE-2013-1515
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2013 2 PoCs

Unspecified vulnerability in the Oracle GlassFish Server component in Oracle Sun Middleware Products 3.0.1 and 3.1.2 allows remote attackers to affect integrity via vectors related to ADMIN Interface.

CVE-2008-5131
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 2 PoCs

Multiple SQL injection vulnerabilities in Develop It Easy News And Article System 1.4 allow remote attackers to execute arbitrary SQL commands via (1) the aid parameter to article_details.php, and the (2) username and (3) password to the admin panel (admin/index.php).

CVE-2008-5336
Software Genérico Web Database
N/A
UNKNOWN
EPSS
1.1%
2008 3 PoCs

SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter.

CVE-2008-2918
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3.

CVE-2008-3200
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 2 PoCs

SQL injection vulnerability in vlc_forum.php in Avlc Forum as of 20080715 allows remote attackers to execute arbitrary SQL commands via the id parameter in an affich_message action.

CVE-2014-0367
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2014 1 PoC

Unspecified vulnerability in the Hyperion Essbase Administration Services component in Oracle Hyperion 11.1.2.1, 11.1.2.2, and 11.1.2.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Admin Console.

CVE-2008-5058
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.8%
2008 1 PoC

SQL injection vulnerability in siteadmin/loginsucess.php in Pre Simple CMS allows remote attackers to execute arbitrary SQL commands via the user parameter, as reachable from siteadmin/adminlogin.php. NOTE: some of these details are obtained from third party information.

CVE-2013-3412
Software Genérico Networking Database
N/A
UNKNOWN
EPSS
0.3%
2013 1 PoC

SQL injection vulnerability in Cisco Unified Communications Manager (CUCM) 7.1(x) through 9.1(2) allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCuh81766.

CVE-2023-36076
Software Genérico Web Database
N/A
UNKNOWN
EPSS
43.9%
2023 1 PoC

SQL Injection vulnerability in smanga version 3.1.9 and earlier, allows remote attackers to execute arbitrary code and gain sensitive information via mediaId, mangaId, and userId parameters in php/history/add.php.

CVE-2008-6429
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.3%
2008 1 PoC

SQL injection vulnerability in the PrayerCenter (com_prayercenter) component 1.4.9 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view_request action to index2.php.

CVE-2008-2688
Software Genérico Database
N/A
UNKNOWN
EPSS
0.3%
2008 1 PoC

SQL injection vulnerability in pilot.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the article parameter in a kb action.

CVE-2008-6324
Software Genérico Database
N/A
UNKNOWN
EPSS
0.5%
2008 1 PoC

SQL injection vulnerability in forummessages.cfm in CF_Forum allows remote attackers to execute arbitrary SQL commands via the categorynbr parameter.

CVE-2007-3447
Software Genérico Database
N/A
UNKNOWN
EPSS
1.4%
2007 1 PoC

SQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to execute arbitrary SQL commands via the "basic search box." NOTE: 4.0.2 and other versions might also be affected.

CVE-2007-2549
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.8%
2007 2 PoCs

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the (1) c or (2) quantity parameter.

CVE-2014-0375
Software Genérico Database
N/A
UNKNOWN
EPSS
2.4%
2014 2 PoCs

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0403.

CVE-2013-3839
Software Genérico Database
N/A
UNKNOWN
EPSS
0.5%
2013 2 PoCs

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.70 and earlier, 5.5.32 and earlier, and 5.6.12 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CVE-2008-6116
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.6%
2008 1 PoC

SQL injection vulnerability in the EXtrovert Software Thyme (com_thyme) 1.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the event parameter to index.php.

CVE-2008-5768
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.3%
2008 2 PoCs

SQL injection vulnerability in print.php in the AM Events (aka Amevents) module 0.22 for XOOPS allows remote attackers to execute arbitrary SQL commands via the id parameter.

CVE-2008-6627
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 1 PoC

SQL injection vulnerability in getin.php in WEBBDOMAIN WebShop 1.2, 1.1, 1.02, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.

CVE-2008-4772
Software Genérico Web Database
N/A
UNKNOWN
EPSS
0.4%
2008 2 PoCs

SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter.