Lucene search
+L

315 matches found

Vulnrichment
Vulnrichment
•added 2025/01/09 2:00 a.m.•10 views

CVE-2024-13204 kurniaramadhan E-Commerce-PHP blog-details.php sql injection

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

6.5CVSS6.8AI score0.0056EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•0 views

CVE-2024-13204: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in kurniaramadhan E-Commerce-PHP 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /blog-details.php. The manipulation of the argument blogid leads to sql injection. The attack can be launched remotely. The...

8CVSS5.5AI score0.0056EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•8 views

E-Commerce-PHP 注入漏洞

E-Commerce-PHP is an e-commerce application using native PHP by the individual developer Kurnia Ramadhan Putra. An injection vulnerability exists in E-Commerce-PHP version 1.0, which stems from the blogid parameter of the file /blog-details.php that causes SQL injection...

8CVSS6.4AI score0.0056EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•3 views

CVE-2025-0339: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotel...

6.1CVSS4AI score0.00371EPSS
SaveExploits1References1
OSV
OSV
•added 2025/01/04 8:15 a.m.•6 views

CVE-2025-0204

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

9.8CVSS5.8AI score0.00606EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/01/04 7:31 a.m.•11 views

CVE-2025-0204 code-projects Online Shoe Store details.php sql injection

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

6.5CVSS7AI score0.00606EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/01/04 7:31 a.m.•62 views

CVE-2025-0204 code-projects Online Shoe Store details.php sql injection

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

6.5CVSS0.00606EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/01/04 12:00 a.m.•10 views

code-projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the id parameter in the /details.php page that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal S...

9.8CVSS8.2AI score0.00606EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•0 views

CVE-2025-0204: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to...

9.8CVSS5.6AI score0.00606EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/31 7:31 p.m.•10 views

CVE-2024-13079 PHPGurukul Land Record System property-details.php sql injection

A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/property-details.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit...

6.5CVSS7.3AI score0.00517EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•0 views

CVE-2024-13079: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Land Record System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/property-details.php. The manipulation of the argument editid leads to sql injection. The attack may be launched remotely. The exploit...

8.8CVSS5.5AI score0.00517EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/29 2:31 a.m.•29 views

CVE-2024-13000 PHPGurukul Small CRM quote-details.php sql injection

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS0.00488EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/29 2:31 a.m.•74 views

CVE-2024-13000

The CVE-2024-13000 entry describes a SQL injection in PHPGurukul Small CRM 1.0, caused by manipulation of the id parameter in /admin/quote-details.php. The vulnerability is network-exploitable with remote initiation, and exploits have been disclosed publicly. Affected component: the /admin/quote-...

9.8CVSS6.8AI score0.00488EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/29 2:31 a.m.•17 views

CVE-2024-13000 PHPGurukul Small CRM quote-details.php sql injection

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

6.5CVSS7.7AI score0.00488EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/29 12:00 a.m.•1 views

CVE-2024-13000: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Small CRM 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/quote-details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th...

9.8CVSS5.5AI score0.00488EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/19 5:00 p.m.•14 views

CVE-2024-12790 code-projects Hostel Management Site room-details.php cross site scripting

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

5.3CVSS6.4AI score0.00557EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/19 12:00 a.m.•2 views

CVE-2024-12790: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Hostel Management Site 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file room-details.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to...

8.2CVSS3.8AI score0.00557EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/20 12:00 a.m.•2 views

CVE-2024-10191: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in PHPGurukul Boat Booking System 1.0. This affects an unknown part of the file /admin/book-details.php of the component Booking Details Page. The manipulation of the argument Official Remark leads to cross site scripting. It is...

5.3CVSS3.7AI score0.00409EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/19 12:00 a.m.•0 views

CVE-2024-9008: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Best Online News Portal 1.0. This vulnerability affects unknown code of the file /news-details.php of the component Comment Section. The manipulation of the argument name leads to sql injection. The attack can be initiated remotel...

9.8CVSS6.4AI score0.00644EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/13 12:00 a.m.•2 views

CVE-2024-44798: Improper Neutralization of Input During Web Page Generation

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...

6.3CVSS5.7AI score0.00328EPSS
SaveExploits1References1
Rows per page
Query Builder