Lucene search
+L

3626 matches found

CNNVD
CNNVD
•added 2023/01/24 12:00 a.m.•17 views

B2B Customer Ordering System 1.0.0.347 跨站脚本漏洞

ID YAZILIM B2B Customer Ordering System is an application from ID YAZILIM, Inc. A security vulnerability exists in B2B Customer Ordering System versions prior to 1.0.0.347, which stems from the presence of an authenticated reflected XSS vulnerability...

5.4CVSS5.7AI score0.00337EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/01/24 12:00 a.m.•42 views

CVE-2022-4554 Reflected XSS B2B Dealer Ordering System

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

5.4CVSS5.4AI score0.00337EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/24 12:00 a.m.•62 views

CVE-2022-4554

The CVE-2022-4554 entry concerns the B2B Customer Ordering System developed by ID Software Project and Consultancy Services. Affected versions are prior to 1.0.0.347 and the vulnerability is an authenticated Reflected XSS vulnerability. The issue is resolved in version 1.0.0.347. Exploitation det...

5.4CVSS5.5AI score0.00337EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/24 12:00 a.m.•18 views

PT-2023-14695 · Unknown · B2B Customer Ordering System

Name of the Vulnerable Software and Affected Versions: B2B Customer Ordering System versions prior to 1.0.0.347 Description: The issue is an authenticated Reflected XSS vulnerability. This vulnerability has been fixed in version 1.0.0.347. Recommendations: For versions prior to 1.0.0.347, update ...

5.4CVSS5.1AI score0.00337EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/24 12:00 a.m.•6 views

CVE-2022-4554: Improper Neutralization of Input During Web Page Generation

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. This has been fixed in the version 1.0.0.347...

5.4CVSS5.7AI score0.00337EPSS
SaveExploits0References4
OSV
OSV
•added 2023/01/20 7:15 p.m.•16 views

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

9.8CVSS5.8AI score0.0082EPSS
SaveExploits1References3
NVD
NVD
•added 2023/01/20 7:15 p.m.•23 views

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

9.8CVSS10AI score0.0082EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/20 7:15 p.m.•22 views

Sql injection

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

7.5CVSS9.9AI score0.0082EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/01/20 12:00 a.m.•15 views

Online-food-ordering-system SQL注入漏洞

Online-food-ordering-system is an application by tourist5 individual developers. A SQL injection vulnerability exists in Online-food-ordering-system version 1.0, which originates from SQL injection...

9.8CVSS8.7AI score0.0082EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/01/20 12:00 a.m.•8 views

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

10AI score0.0082EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/01/20 12:00 a.m.•40 views

CVE-2020-29297

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

10AI score0.0082EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/01/20 12:00 a.m.•15 views

PT-2023-11775 · Unknown · Tourist5 Online-Food-Ordering-System

Name of the Vulnerable Software and Affected Versions: tourist5 Online-food-ordering-system version 1.0 Description: The issue concerns Multiple SQL Injection vulnerabilities. Recommendations: For tourist5 Online-food-ordering-system version 1.0, update to a version that includes a fix for the SQ...

9.8CVSS9.8AI score0.0082EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•6 views

CVE-2020-29297: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL Injection vulnerabilities in tourist5 Online-food-ordering-system 1.0...

9.8CVSS5.8AI score0.0082EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/20 12:00 a.m.•68 views

CVE-2020-29297

CVE-2020-29297 : Multiple SQL injection vulnerabilities affect the tourist5 Online-food-ordering-system 1.0. Public data in the connected documents identify the flaw as unsafe SQL query construction leading to unauthorized data access and manipulation. The CVSSv3.1 base metrics are high (9.8, CRI...

9.8CVSS9.9AI score0.0082EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/01/17 8:15 a.m.•17 views

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.7AI score0.00915EPSS
SaveExploits1References3
NVD
NVD
•added 2023/01/17 8:15 a.m.•24 views

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS8.1AI score0.00915EPSS
SaveExploits1References3
Prion
Prion
•added 2023/01/17 8:15 a.m.•24 views

Sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS9.7AI score0.00915EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/01/17 7:29 a.m.•40 views

CVE-2023-0332 SourceCodester Online Food Ordering System manage_user.php sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS10AI score0.00915EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/17 7:29 a.m.•76 views

CVE-2023-0332

CVE-2023-0332 affects SourceCodester Online Food Ordering System 2.0. An SQL injection vulnerability exists in an unknown function of admin/manage_user.php where manipulating the id parameter enables a remote attack. The NVD entry lists a Critical severity (CVSSv3.1 base score 9.8) with network a...

9.8CVSS8.9AI score0.00915EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/01/17 12:00 a.m.•15 views

PT-2023-16185 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file admin/manage user.php. This ca...

9.8CVSS7.7AI score0.00915EPSS
SaveExploits1References4
Rows per page
Query Builder