CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

Rapid7 Vulnerability Database (full)•added 2023/04/14 12:00 a.m.•1 views

CVE-2023-29622: Improper Neutralization of Special Elements used in an SQL Command

Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchaseorder/admin/login.php...

9.8CVSS5.8AI score0.01657EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2022/11/28 12:00 a.m.•1 views

CVE-2022-44400: Unrestricted Upload of File with Dangerous Type

Purchase Order Management System v1.0 contains a file upload vulnerability via /purchaseorder/admin/?page=systeminfo...

9.8CVSS5.8AI score0.01132EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2022/04/21 12:00 a.m.•2 views

CVE-2022-28021: Unrestricted Upload of File with Dangerous Type

Purchase Order Management System v1.0 was discovered to contain a remote code execution RCE vulnerability via /purchaseorder/admin/?page=user...

9.8CVSS8.7AI score0.24256EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by