Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2018-17428

An issue was discovered in OPAC EasyWeb Five 5.7. There is SQL injection via the w2001/index.php?scelta=campi biblio parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Nexusfi
Products
Opac Easyweb Five
CVE-2018-17420

An issue was discovered in ZrLog 2.0.3. There is a SQL injection vulnerability in the article management search box via the keywords parameter.

CVSS 3.0 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Zrlog
Products
Zrlog
CVE-2018-17416

A SQL injection vulnerability exists in zzcms v8.3 via the /admin/adclass.php bigclassid parameter.

CVSS 3.0 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-17415

zzcms V8.3 has a SQL injection in /user/zs_elite.php via the id parameter.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-17414

zzcms v8.3 has a SQL injection in /user/jobmanage.php via the bigclass parameter.

CVSS 3.0 · 8.8 High EPSS 1.3% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-17412

zzcms v8.3 contains a SQL Injection vulnerability in /user/logincheck.php via an X-Forwarded-For HTTP header.

CVSS 3.0 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Zzcms
Products
Zzcms
CVE-2018-17398

SQL Injection exists in the AMGallery 1.2.3 component for Joomla! via the filter_category_id parameter.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Arenam
Products
Amgallery
CVE-2018-17388

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to add_email.php or edit_content.php.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Ranksol
Products
Twilio Web To Fax Machine System
CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.

CVSS 3.0 · 9.8 Critical EPSS 2.3% KEV · Not listed
Vendors
Thephpfactory
Products
Micro Deal Factory
CVE-2018-17385

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Thephpfactory
Products
Social Factory
CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.3% KEV · Not listed
Vendors
Thephpfactory
Products
Swap Factory
CVE-2018-17383

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Thephpfactory
Products
Collection Factory
CVE-2018-17382

SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.

CVSS 3.0 · 9.8 Critical EPSS 3.2% KEV · Not listed
Vendors
Thephpfactory
Products
Jobs Factory