Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 2015.1, as used in Network Performance Monitor (NPM) before. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 77.5%.
SQLi
Node.js
Orion Ip Address Manager
Orion Netflow Traffic Analyzer
Orion Network Configuration Manager
+5
NVD
Exploit-DB
GitHub
CVSS 2.0
7.5
EPSS
77.5%
Threat
5.3
Multiple SQL injection vulnerabilities in the administrative backend in ZeusCart 4 allow remote administrators to execute arbitrary SQL commands via the id parameter in a (1) disporders detail or (2). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
SQLi
Zeuscart
NVD
Exploit-DB
GitHub
CVSS 2.0
7.5
EPSS
3.9%