Lucene search
+L

2584 matches found

Cvelist
Cvelist
•added 2022/02/01 6:36 p.m.•66 views

CVE-2022-24223

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

10AI score0.61965EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•4 views

CVE-2022-24223: Improper Neutralization of Special Elements used in an SQL Command

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

9.8CVSS8.2AI score0.61965EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/01 12:00 a.m.•6 views

CVE-2021-43510: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php...

9.8CVSS8.2AI score0.07515EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•5 views

PT-2022-11863

Name of the Vulnerable Software and Affected Versions Sourcecodester Simple Client Management System version 1.0 Description A SQL Injection issue exists via the username field in the "login.php" file. This allows for potential exploitation. Recommendations For Sourcecodester Simple Client...

9.8CVSS0.07515EPSS
SaveExploits1References6
NVD
NVD
•added 2022/01/28 4:15 p.m.•29 views

CVE-2020-25905

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...

9.8CVSS0.01666EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•7 views

CVE-2021-45435: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

9.8CVSS8.2AI score0.01096EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/01/28 12:00 a.m.•37 views

CVE-2020-25905

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...

9.9AI score0.01666EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•8 views

CVE-2020-25905: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...

9.8CVSS8.2AI score0.01666EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/01/26 12:00 a.m.•98 views

Online Payment Hub SQL注入漏洞

Online Payment Hub is an online payment hub for Carlo Montero personal developers. The Online Payment Hub is vulnerable to SQL injection due to a lack of filtering and escaping of SQL data in Login.php, which could be exploited to execute arbitrary SQL commands via the username parameter...

9.8CVSS4AI score0.01289EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/01/26 12:00 a.m.•65 views

SourceCodester Storage Unit Rental Management System SQL Injection Vulnerability

SourceCodester Storage Unit Rental Management System is a storage unit rental management system that helps manage storage unit rental business records and monitor their records. sourceCodester Storage Unit Rental Management A SQL injection vulnerability exists in the v1 version of the System. The...

9.8CVSS2AI score0.01254EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/24 7:15 p.m.•18 views

CVE-2021-43420

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.1AI score0.01289EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/24 7:15 p.m.•31 views

Sql injection

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

7.5CVSS9.9AI score0.01289EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/01/24 6:53 p.m.•97 views

CVE-2021-43420

CVE-2021-43420 affects Sourcecodester Online Payment Hub v1 (Login.php) by oretnom23. A SQL injection is possible via the username parameter, caused by insufficient input handling (no filtering/escaping of SQL data). Reported as a high/critical issue in CVSS metrics (NVD): CVSS 2.0 base score 7.5...

9.8CVSS9.9AI score0.01289EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/24 6:53 p.m.•36 views

CVE-2021-43420

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

10AI score0.01289EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/24 6:15 p.m.•28 views

CVE-2021-41660

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

9.8CVSS0.01254EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/24 6:15 p.m.•27 views

Sql injection

SQL injection vulnerability in Sourcecodester Patient Appointment Scheduler System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username and password fields to login.php...

7.5CVSS10AI score0.01254EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/01/24 5:52 p.m.•79 views

CVE-2021-41660

The CVE-2021-41660 entry relates to a SQL injection in Sourcecodester Patient Appointment Scheduler System v1 (author oretnom23). The vulnerability is triggered through unsanitized input in the login.php username and password fields, allowing an attacker to execute arbitrary SQL commands. Public ...

9.8CVSS10AI score0.01254EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2022/01/24 3:15 p.m.•10 views

CVE-2021-40596

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS7.6AI score0.01254EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/24 3:15 p.m.•31 views

CVE-2021-40907

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php...

9.8CVSS0.01254EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/24 3:15 p.m.•19 views

Sql injection

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder