漏洞 - 第147页-OGeek|极客世界-中国程序员成长平台

OGeek|极客世界-中国程序员成长平台 › 门户 ›漏洞

漏洞

RSS

下级分类:

CVE漏洞

CVE-2022-28414

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：26 | 回复：0
CVE漏洞

CVE-2022-28413

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_enrollment.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：25 | 回复：0
CVE漏洞

CVE-2022-28412

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_package.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：27 | 回复：0
CVE漏洞

CVE-2022-28411

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manage_agent.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：42 | 回复：0
CVE漏洞

CVE-2022-28410

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=delete_agent.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：54 | 回复：0
CVE漏洞

CVE-2022-28030

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：56 | 回复：0
CVE漏洞

CVE-2022-28029

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_type.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：56 | 回复：0
CVE漏洞

CVE-2022-28028

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：68 | 回复：0
CVE漏洞

CVE-2022-28026

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_pid=.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：58 | 回复：0
CVE漏洞

CVE-2022-28025

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：80 | 回复：0
CVE漏洞

CVE-2022-28024

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：147 | 回复：0
CVE漏洞

CVE-2022-28023

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：83 | 回复：0
CVE漏洞

CVE-2022-28022

Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：58 | 回复：0
CVE漏洞

CVE-2022-28021

Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：46 | 回复：0
CVE漏洞

CVE-2022-28020

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-28019

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-28018

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：33 | 回复：0
CVE漏洞

CVE-2022-28017

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：32 | 回复：0
CVE漏洞

CVE-2022-28016

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\deduction_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：31 | 回复：0
CVE漏洞

CVE-2022-28015

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-28014

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-28013

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_employee_edit.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-28012

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：39 | 回复：0
CVE漏洞

CVE-2022-28011

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\schedule_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：45 | 回复：0
CVE漏洞

CVE-2022-28010

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\overtime_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-28009

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：30 | 回复：0
CVE漏洞

CVE-2022-28008

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\attendance_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：38 | 回复：0
CVE漏洞

CVE-2022-28007

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\cashadvance_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：49 | 回复：0
CVE漏洞

CVE-2022-28006

Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\employee_delete.php.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：57 | 回复：0
CVE漏洞

CVE-2022-27478

Victor v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component admin/profile.php?section=admin.……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：46 | 回复：0
CVE漏洞

CVE-2022-29566

The Bulletproofs 2017/1066 paper mishandles Fiat-Shamir generation because the hash computation fails to include all of the public values from the Zero Knowledge proof statement as well as all of the ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：50 | 回复：0
CVE漏洞

CVE-2022-28820

ACS Commons version 5.1.x (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in /apps/acs-commons/content/page-compare.html endpoint via the a and b GET parameters. User i ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：47 | 回复：0
CVE漏洞

CVE-2022-28743

Time-of-check Time-of-use (TOCTOU) Race Condition vulerability in Foscam R2C IP camera running System FW = 1.13.1.6, and Application FW = 2.91.2.66, allows an authenticated remote attacker with admini ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：39 | 回复：0
CVE漏洞

CVE-2022-23711

A vulnerability in Kibana could expose sensitive information related to Elastic Stack monitoring in the Kibana page source. Elastic Stack monitoring features provide a way to keep a pulse on the healt ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：42 | 回复：0
CVE漏洞

CVE-2022-22969

Issue Description Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：47 | 回复：0
CVE漏洞

CVE-2022-20805

A vulnerability in the automatic decryption process in Cisco Umbrella Secure Web Gateway (SWG) could allow an authenticated, adjacent attacker to bypass the SSL decryption and content filtering polici ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：36 | 回复：0
CVE漏洞

CVE-2022-20804

A vulnerability in the Cisco Discovery Protocol of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-20795

A vulnerability in the implementation of the Datagram TLS (DTLS) protocol in Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthent ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：35 | 回复：0
CVE漏洞

CVE-2022-20790

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could al ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：28 | 回复：0
CVE漏洞

CVE-2022-20789

A vulnerability in the software upgrade process of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an ...……

作者：菜鸟教程小白 | 时间：2022-6-23 10:16 | 阅读：33 | 回复：0