Lucene search
+L

3619 matches found

CNVD
CNVD
•added 2019/02/25 12:00 a.m.•16 views

PHP Scripts Mall Online Food Ordering Script Cross-Site Request Forgery Vulnerability

PHP Scripts Mall Online Food Ordering Script is a web-based online food ordering website system from PHP Scripts Mall India. A cross-site request forgery vulnerability exists in the my-account.php file in PHP Scripts Mall Online Food Ordering Script version 1.0, which can be exploited by remote...

8CVSS7.2AI score0.00545EPSS
SaveExploits1References1
Prion
Prion
•added 2019/02/23 9:29 p.m.•21 views

Cross site request forgery (csrf)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

6CVSS8AI score0.00545EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2019/02/23 9:29 p.m.•25 views

CVE-2019-9062

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

8CVSS8.1AI score0.00545EPSS
SaveExploits1References1
OSV
OSV
•added 2019/02/23 9:29 p.m.•14 views

CVE-2019-9062

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

8CVSS7.3AI score0.00545EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2019/02/23 9:00 p.m.•37 views

CVE-2019-9062

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

8.1AI score0.00545EPSS
SaveExploits1References1
CVE
CVE
•added 2019/02/23 9:00 p.m.•67 views

CVE-2019-9062

The CVE-2019-9062 entry concerns PHP Scripts Mall Online Food Ordering Script version 1.0, where a Cross-Site Request Forgery (CSRF) exists in my-account.php. The available connected documents corroborate a CSRF vulnerability in that file, enabling unauthorized state-changing requests. PT-2019-19...

8CVSS8AI score0.00545EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/02/23 12:00 a.m.•4 views

CVE-2019-9062: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Online Food Ordering Script 1.0 has Cross-Site Request Forgery CSRF in my-account.php...

8CVSS5.7AI score0.00545EPSS
SaveExploits1References2
OSV
OSV
•added 2019/01/16 8:29 p.m.•9 views

DEBIAN-CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND...

7.5CVSS6.8AI score0.08975EPSS
SaveExploits0References1
NVD
NVD
•added 2019/01/16 8:29 p.m.•23 views

CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND...

7.5CVSS7.5AI score0.08975EPSS
SaveExploits0References11
OSV
OSV
•added 2019/01/16 8:29 p.m.•26 views

CVE-2017-3137

Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could lead to a situation in which named would exit with an assertion failure when processing a response in which records occurred in an unusual order. Affects BIND...

7.5CVSS6.6AI score
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2019/01/03 12:00 a.m.•53 views

Fedora 29 : systemd (2018-c402eea18b)

Fix a local vulnerability from a race condition in chown-recursive CVE-2018-15687, 1639076 - Fix a local vulnerability from invalid handling of long lines in state deserialization CVE-2018-15686, 1639071 - Fix a remote vulnerability in DHCPv6 in systemd-networkd CVE-2018-15688, 1639067 - The DHCP...

8.8CVSS6.5AI score0.02261EPSS
SaveExploits10References4
CNVD
CNVD
•added 2018/11/20 12:00 a.m.•16 views

BSEN Ordering software SQL Injection Vulnerability

BSEN Ordering software is a procurement management system. A SQL injection vulnerability exists in BSEN Ordering software version 1.0. A remote attacker can use the vulnerability to view, add, modify, or delete information in the back-end database with the help of the...

9.8CVSS9.6AI score0.03213EPSS
SaveExploits5References1
OSV
OSV
•added 2018/11/16 6:29 p.m.•12 views

CVE-2018-18801

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

9.8CVSS5.8AI score0.03213EPSS
SaveExploits5References2
NVD
NVD
•added 2018/11/16 6:29 p.m.•20 views

CVE-2018-18801

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

9.8CVSS10AI score0.03213EPSS
SaveExploits5References2
Prion
Prion
•added 2018/11/16 6:29 p.m.•19 views

Sql injection

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

7.5CVSS9.9AI score0.03213EPSS
SaveExploits5References2Affected Software1
Cvelist
Cvelist
•added 2018/11/16 6:00 p.m.•32 views

CVE-2018-18801

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

10AI score0.03213EPSS
SaveExploits5References2
CVE
CVE
•added 2018/11/16 6:00 p.m.•75 views

CVE-2018-18801

CVE-2018-18801 affects the BSEN Ordering software (v1.0). The vulnerability is a SQL Injection in the frontend endpoints student/index.php?view=view&id=[SQL] and index.php?q=single-item&id=[SQL], allowing an attacker to extract or modify data via crafted SQL payloads. Connected sources confirm th...

9.8CVSS8.2AI score0.03213EPSS
SaveExploits5References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/16 12:00 a.m.•2 views

CVE-2018-18801: Improper Neutralization of Special Elements used in an SQL Command

The BSEN Ordering software 1.0 has SQL Injection via student/index.php?view=view&id=SQL or index.php?q=single-item&id=SQL...

9.8CVSS8.2AI score0.03213EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2018/11/16 12:00 a.m.•2 views

PT-2018-14663

Name of the Vulnerable Software and Affected Versions BSEN Ordering software version 1.0 Description The issue concerns SQL Injection. It can be exploited via the index.php endpoint, specifically through the id parameter in the URLs student/index.php?view=view&id=SQL or...

9.8CVSS0.03213EPSS
SaveExploits5References4
CNVD
CNVD
•added 2018/10/19 12:00 a.m.•9 views

Storage-based Cross-site Scripting Vulnerability in the Frontend of the Glory Information Ordering and Consumption System

Rongguang Information Ordering and Picking Up Food Consumption System is a multi-functional ordering system developed by Shenzhen Rongguang Information Co. A stored cross-site scripting vulnerability exists in the frontend of the Rongguang Information Ordering and Consumption System. An attacker...

6.2AI score
SaveExploits0
Rows per page
Query Builder