Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2020-21250

CSZ CMS v1.2.4 was discovered to contain an arbitrary file upload vulnerability in the component /core/MY_Security.php.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Cszcms
Products
Csz Cms
CVE-2020-21180

Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signup page.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Koa2-blog Project
Products
Koa2-blog
CVE-2020-21179

Sql injection vulnerability in koa2-blog 1.0.0 allows remote attackers to Injecting a malicious SQL statement via the name parameter to the signin page.

CVSS 3.1 · 9.8 Critical EPSS 1.4% KEV · Not listed
Vendors
Koa2-blog Project
Products
Koa2-blog
CVE-2020-21176

SQL injection vulnerability in the model.increment and model.decrement function in ThinkJS 3.2.10 allows remote attackers to execute arbitrary SQL commands via the step parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Thinkjs
Products
Thinkjs
CVE-2020-21133

SQL Injection vulnerability in Metinfo 7.0.0 beta in member/getpassword.php?lang=cn&a=dovalid.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-21132

SQL Injection vulnerability in Metinfo 7.0.0beta in index.php.

CVSS 3.1 · 9.8 Critical EPSS 1.7% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-21131

SQL Injection vulnerability in MetInfo 7.0.0beta via admin/?n=language&c=language_web&a=doAddLanguage.

CVSS 3.1 · 7.2 High EPSS 1.2% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-21127

MetInfo 7.0.0 contains a SQL injection vulnerability via admin/?n=logs&c=index&a=dodel.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-21121

Pligg CMS 2.0.2 contains a time-based SQL injection vulnerability via the $recordIDValue parameter in the admin_update_module_widgets.php file.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Kliqqi
Products
Kliqqi Cms
CVE-2020-21013

emlog v6.0.0 contains a SQL injection via /admin/comment.php.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Emlog
Products
Emlog
CVE-2020-20981

A SQL injection in the /admin/?n=logs&c=index&a=dolist component of Metinfo 7.0 allows attackers to access sensitive database information.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-20975

In \lib\admin\action\dataaction.class.php in Gxlcms v1.1, SQL Injection exists via the $filename parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Gxlcms
Products
Gxlcms
CVE-2020-20800

An issue was discovered in MetInfo v7.0.0 beta. There is SQL Injection via the install/index.php?action=adminsetup&cndata=yes&endata=yes&showdata=yes URI.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-20796

FlameCMS 3.3.5 contains a SQL injection vulnerability in /master/article.php via the "Id" parameter.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Flamecms Project
Products
Flamecms
CVE-2020-20692

GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Gilacms
Products
Gila Cms
CVE-2020-20675

Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.

CVSS 3.1 · 9.8 Critical EPSS 1.1% KEV · Not listed
Vendors
Nuishop
Products
Nuishop
CVE-2020-20625

Sliced Invoices plugin for WordPress 3.8.2 and earlier allows unauthenticated information disclosure and authenticated SQL injection via core/class-sliced.php.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Slicedinvoices
Products
Sliced Invoices
CVE-2020-20585

A blind SQL injection in /admin/?n=logs&c=index&a=dode of Metinfo 7.0 beta allows attackers to access sensitive database information.

CVSS 3.1 · 7.5 High EPSS 1.7% KEV · Not listed
Vendors
Metinfo
Products
Metinfo
CVE-2020-20583

A SQL injection vulnerability in /question.php of LJCMS Version v4.3.R60321 allows attackers to obtain sensitive database information.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
8cms
Products
Ljcms