Export limit exceeded: 17086 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2018-18800

The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or admin/login.php.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Tubigan
Products
Welcome To Our Resort
CVE-2018-18792

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs_list.php via a pxzs cookie.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18791

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/search.php via a pxzs cookie.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18790

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/special_add.php via a zxbigclassid cookie. (This needs an admin user login.)

CVSS 3.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18789

An issue was discovered in zzcms 8.3. SQL Injection exists in zt/top.php via a Host HTTP header to zt/news.php.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18788

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/classmanage.php via the tablename parameter. (This needs an admin user login.)

CVSS 3.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18787

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/zs.php via a pxzs cookie.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18786

An issue was discovered in zzcms 8.3. SQL Injection exists in ajax/zs.php via a pxzs cookie.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18785

An issue was discovered in zzcms 8.3. SQL Injection exists in zs/subzs.php with a zzcmscpid cookie to zs/search.php.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18784

An issue was discovered in zzcms 8.3. SQL Injection exists in admin/tagmanage.php via the tabletag parameter. (This needs an admin user login.)

CVSS 3.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-18763

SaltOS 3.1 r8126 allows action=ajax&query=numbers&page=usuarios&action2=[SQL] SQL Injection.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Saltos
Products
Saltos
CVE-2018-18761

SaltOS 3.1 r8126 allows action=login&querystring=&user=[SQL] SQL Injection.

CVSS 3.1 · 9.8 Critical EPSS 16.5% KEV · Not listed
Vendors
Saltos
Products
Saltos