Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•11 views

CVE-2021-40907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester Storage Unit Rental Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /storage/classes/Login.php...

9.8CVSS6.3AI score0.01254EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/24 12:00 a.m.•6 views

PT-2022-11335

Name of the Vulnerable Software and Affected Versions Sourcecodester Storage Unit Rental Management System version v1 Description The issue allows attackers to execute arbitrary SQL commands via the username parameter to the "/storage/classes/Login.php" API endpoint. This enables potential...

9.8CVSS0.01254EPSS
SaveExploits1References4
Rows per page
Query Builder