Lucene search
+L

7162 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•0 views

CVE-2024-10996: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/processcategoryedit.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS6.9AI score0.00698EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•3 views

CVE-2024-10987: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects E-Health Care System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Doctor/userappointment.php. The manipulation of the argument scheduleid/scheduledate/scheduleday/starttime/endtime/booking...

6.5CVSS6.4AI score0.00435EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•4 views

CVE-2024-10998: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/processcategoryadd.php. The manipulation of the argument cat leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•12 views

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which originates in the file /Doctor/userappointment.php with parameters scheduleid/scheduledate/scheduleday/starttime...

6.5CVSS7AI score0.00435EPSS
SaveExploits1References5
NVD
NVD
•added 2024/11/07 8:15 p.m.•26 views

CVE-2024-10969

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/loginprocess.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack m...

9.8CVSS0.00652EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/07 7:31 p.m.•17 views

CVE-2024-10968 1000 Projects Bookstore Management System contact_process.php sql injection

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contactprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotel...

7.5CVSS7.3AI score0.00698EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/07 7:31 p.m.•80 views

CVE-2024-10968

CVE-2024-10968 affects 1000 Projects Bookstore Management System v1.0, specifically the /contact_process.php file. The vulnerability is triggered by manipulating the fnm parameter, leading to SQL injection. Exploitation is remote and has been disclosed publicly. Several connected sources corrobor...

9.8CVSS7.5AI score0.00698EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/11/07 6:00 p.m.•41 views

CVE-2024-10967 code-projects E-Health Care System delete_user_appointment_request.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/deleteuserappointmentrequest.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

7.5CVSS0.0075EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/07 6:00 p.m.•24 views

CVE-2024-10967 code-projects E-Health Care System delete_user_appointment_request.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/deleteuserappointmentrequest.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

7.5CVSS7.5AI score0.0075EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/07 12:00 a.m.•14 views

Code-Projects E-Health Care System 注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. An injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter id of the file /Doctor/deleteuserappointmentrequest.php that can lead to SQL injection...

7.5CVSS8AI score0.0075EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•3 views

CVE-2024-10968: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contactprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotel...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•2 views

CVE-2024-10969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/loginprocess.php of the component Login. The manipulation of the argument unm/pwd leads to sql injection. The attack m...

9.8CVSS6.9AI score0.00652EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/07 12:00 a.m.•2 views

CVE-2024-10967: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file /Doctor/deleteuserappointmentrequest.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

7.5CVSS6.9AI score0.0075EPSS
SaveExploits1References1
NVD
NVD
•added 2024/11/05 3:15 p.m.•30 views

CVE-2024-10844

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS0.00929EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/05 3:00 p.m.•45 views

CVE-2024-10844 1000 Projects Bookstore Management System search.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file search.php. The manipulation of the argument s leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00929EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/11/05 2:00 a.m.•36 views

CVE-2024-10810 code-projects E-Health Care System app_request.php sql injection

A vulnerability was found in code-projects E-Health Care System 1.0. It has been classified as critical. Affected is an unknown function of the file Doctor/apprequest.php. The manipulation of the argument appid leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.0047EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/05 1:00 a.m.•36 views

CVE-2024-10808 code-projects E-Health Care System req_detail.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS0.00502EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/05 1:00 a.m.•20 views

CVE-2024-10808 code-projects E-Health Care System req_detail.php sql injection

A vulnerability has been found in code-projects E-Health Care System 1.0 and classified as critical. This vulnerability affects unknown code of the file Admin/reqdetail.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS6.9AI score0.00502EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/05 12:00 a.m.•13 views

code-projects E-Health Care System 安全漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A security vulnerability exists in code-projects E-Health Care System version 1.0, which stems from an SQL injection in the parameter appid...

7.5CVSS7AI score0.0047EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/05 12:00 a.m.•2 views

CVE-2024-10809: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects E-Health Care System 1.0 and classified as critical. This issue affects some unknown processing of the file /Doctor/chat.php. The manipulation of the argument name/message leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS6.4AI score0.00502EPSS
SaveExploits1References1
Rows per page
Query Builder