Export limit exceeded: 21746 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 21,746

Export CSV
CVE-2020-19455

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via components/com_jdownloads/helpers/categories.php, order function via the filter_order parameter.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Jdownloads
Products
Jdownloads
CVE-2020-19451

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, updateLog function via the X-forwarded-for Header parameter.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Jdownloads
Products
Jdownloads
CVE-2020-19450

SQL injection exists in the jdownloads 3.2.63 component for Joomla! via com_jdownloads/helpers/jdownloadshelper.php, getUserLimits function in the list parameter.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Jdownloads
Products
Jdownloads
CVE-2020-19447

SQL injection exists in the jdownloads 3.2.63 component for Joomla! com_jdownloads/models/send.php via the f_marked_files_id parameter.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Jdownloads
Products
Jdownloads
CVE-2020-19217

SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Piwigo
Products
Piwigo
CVE-2020-19216

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Piwigo
Products
Piwigo
CVE-2020-19215

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Piwigo
Products
Piwigo
CVE-2020-19213

SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.

CVSS 3.1 · 9.8 Critical EPSS 15.9% KEV · Not listed
Vendors
Piwigo
Products
Piwigo
CVE-2020-19212

SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.

CVSS 3.1 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Piwigo
Products
Piwigo
CVE-2020-19165

PHPSHE 1.7 has SQL injection via the admin.php?mod=user&userlevel_id=1 userlevel_id[] parameter.

CVSS 3.1 · 9.8 Critical EPSS 1.6% KEV · Not listed
Vendors
Phpshe
Products
Phpshe
CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive database information.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Ecisp
Products
Espcms-p8
CVE-2020-18877

SQL Injection in Wuzhi CMS v4.1.0 allows remote attackers to obtain sensitive information via the 'flag' parameter in the component '/coreframe/app/order/admin/index.php'.

CVSS 3.1 · 7.5 High EPSS 1.5% KEV · Not listed
Vendors
Wuzhicms
Products
Wuzhicms
CVE-2020-18746

SQL Injection in AiteCMS v1.0 allows remote attackers to execute arbitrary code via the component "aitecms/login/diy_list.php".

CVSS 3.1 · 7.2 High EPSS 1.8% KEV · Not listed
Vendors
Aitecms
Products
Aitecms
CVE-2020-18717

SQL Injection in ZZZCMS zzzphp 1.7.1 allows remote attackers to execute arbitrary code due to a lack of parameter filtering in inc/zzz_template.php.

CVSS 3.1 · 9.8 Critical EPSS 3.7% KEV · Not listed
Vendors
Zzzcms
Products
Zzzphp