Lucene search
+L

7405 matches found

CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•17 views

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter empid that can lead to SQL injection...

8.8CVSS7.1AI score0.00507EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•6 views

CVE-2025-2985: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. This affects an unknown part of the file updateaccount.php. The manipulation of the argument deduction leads to sql injection. It is possible to initiate the attack remotely. The exploit...

8.8CVSS6.4AI score0.00507EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•2 views

CVE-2025-3039: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /addemployee.php. The manipulation of the argument lname/fname leads to sql injection. It is possible to launch the attack remotely. The exploi...

8.8CVSS6.4AI score0.0067EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/31 12:00 a.m.•3 views

CVE-2025-31624: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LABCAT Processing Projects processing-projects allows DOM-Based XSS.This issue affects Processing Projects: from n/a through = 1.0.2...

6.5CVSS5.8AI score0.00222EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/30 12:00 a.m.•7 views

PT-2025-13646

Name of the Vulnerable Software and Affected Versions code-projects College Management System version 1.0 Description A critical issue was found in the College Management System, affecting the /Admin/student.php file. The manipulation of the profile image argument leads to unrestricted upload. Th...

9.8CVSS0.00523EPSS
SaveExploits1References13
NVD
NVD
•added 2025/03/28 10:15 a.m.•19 views

CVE-2024-12619

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

6.5CVSS0.00267EPSS
SaveExploits1References2
OSV
OSV
•added 2025/03/28 10:15 a.m.•24 views

UBUNTU-CVE-2024-12619

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

6.5CVSS5.7AI score0.00267EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/03/28 10:02 a.m.•15 views

CVE-2024-12619 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

5.2CVSS7AI score0.00267EPSS
SaveExploits1References2
Mend
Mend
•added 2025/03/28 10:02 a.m.•3 views

CVE-2024-12619

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

6.9CVSS0.00267EPSS
SaveExploits1References5
OSV
OSV
•added 2025/03/28 10:02 a.m.•20 views

CVE-2024-12619 Insufficient Granularity of Access Control in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

5.2CVSS6.7AI score
SaveExploits0References5
CNNVD
CNNVD
•added 2025/03/28 12:00 a.m.•14 views

GitLab Enterprise Edition(EE)和GitLab Community Edition(CE) 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition EE and GitLab Community...

6.5CVSS6.3AI score0.00267EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/28 12:00 a.m.•4 views

CVE-2024-12619: Insufficient Granularity of Access Control

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 before 17.8.6, 17.9 before 17.9.3, and 17.10 before 17.10.1, allowing internal users to gain unauthorized access to internal projects...

6.5CVSS5.9AI score0.00267EPSS
SaveExploits1References1
OSV
OSV
•added 2025/03/27 12:30 p.m.•12 views

CVE-2025-2242 Incorrect Authorization in GitLab

An improper access control vulnerability in GitLab CE/EE affecting all versions from 17.4 prior to 17.8.6, 17.9 prior to 17.9.3, and 17.10 prior to 17.10.1 allows a user who was an instance admin before but has since been downgraded to a regular user to continue to maintain elevated privileges to...

7.5CVSS6.4AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/27 12:00 a.m.•4 views

CVE-2025-2854: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file updateemployee.php. The manipulation of the argument emptype leads to sql injection. The attack can be launched remotely. The...

8.8CVSS6.4AI score0.00534EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/03/26 12:00 a.m.•17 views

PT-2025-13455 · Gitlab · Gitlab Ce/Ee

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.0 through 17.8.5 GitLab CE/EE versions 17.9 through 17.9.2 GitLab CE/EE versions 17.10 through 17.10.0 Description: An issue has been discovered in GitLab CE/EE, allowing internal users to gain unauthorized access to...

7.5CVSS6.2AI score0.00267EPSS
SaveExploits1References15
BDU FSTEC
BDU FSTEC
•added 2025/03/24 12:00 a.m.•23 views

The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from the lack of authentication procedures, which allow unauthorized users to modify the status of tasks in publicly accessible projects.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely modify the status of tasks in publicly accessible projects...

4.3CVSS5.6AI score0.0043EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/24 12:00 a.m.•7 views

CVE-2025-2673: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /homeemployee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploi...

5.4CVSS3.8AI score0.00347EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•5 views

CVE-2025-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS6.4AI score0.00409EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•19 views

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...

7.5CVSS7.1AI score0.00409EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•16 views

Code-Projects Payroll Management System 安全漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect operation of the parameter division that can lead to cross-site scripting...

5.4CVSS4.5AI score0.00347EPSS
SaveExploits1References1
Rows per page
Query Builder