Lucene search
+L

1697 matches found

OSV
OSV
•added 2024/01/07 11:15 a.m.•12 views

CVE-2024-0272

A vulnerability was found in Kashipara Food Management System up to 1.0 and classified as critical. This issue affects some unknown processing of the file addmaterialsubmit.php. The manipulation of the argument materialname leads to sql injection. The attack may be initiated remotely. The exploit...

6.5CVSS5.7AI score0.00526EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•12 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by the lack of validation of the parameter itemype in the stockentrysubmit.php file for externally entered SQL...

9.8CVSS8.2AI score0.00628EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•16 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally entered SQL statements in the id parameter of the partylisteditsubmit.php...

6.5CVSS8.2AI score0.00589EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•25 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which originates from the lack of validation of the rawstockuseddamagingsubmit.php parameter productname against externally-entered SQ...

9.8CVSS8.2AI score0.00697EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•16 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by the lack of validation of the typename parameter of the itemtypesubmit.php file against externally-entered SQL...

6.5CVSS8.2AI score0.00565EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•17 views

Kashipara Food Management System 安全漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by the lack of validation of the materialname parameter of the addmaterialsubmit.php file against external SQL input,...

6.5CVSS8.2AI score0.00526EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•24 views

PT-2024-15448 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A critical vulnerability has been found in the Kashipara Food Management System. This issue affects an unknown part of the file rawstock used damaged submit.php. The manipulation of th...

9.8CVSS8.2AI score0.00697EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•17 views

PT-2024-15444 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A vulnerability was found in the processing of the file party submit.php, where the manipulation of the party address argument leads to cross-site scripting. The attack may be initiate...

6.1CVSS6.6AI score0.00542EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/01/07 12:00 a.m.•14 views

PT-2024-15449 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A critical vulnerability was found in the Kashipara Food Management System, affecting the file stock entry submit.php. The manipulation of the itemype argument leads to SQL injection...

9.8CVSS8.1AI score0.00628EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•18 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by the lack of validation of the partyname parameter of the partysubmit.php file against external SQL input, and can b...

6.5CVSS8.2AI score0.00577EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•15 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by a lack of validation of the itemname parameter of the itemlistsubmit.php file against externally-entered SQL...

6.5CVSS8.2AI score0.00577EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/01/07 12:00 a.m.•16 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by a lack of validation of the id parameter of the itemeditsubmit.php file against externally entered SQL statements,...

6.5CVSS8.2AI score0.00577EPSS
SaveExploits1References4
OSV
OSV
•added 2024/01/04 2:15 p.m.•15 views

CVE-2023-49666

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmerdetails' parameter of the submitmateriallist.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00746EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/04 2:15 p.m.•10 views

CVE-2023-49639

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'customerdetails' parameter of the buyerinvoicesubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/04 2:15 p.m.•14 views

CVE-2023-49658

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/04 12:00 a.m.•21 views

PT-2024-13772 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the id parameter of the "partylist edit submit.php" resource does not validate the characters received, and the...

9.8CVSS9.8AI score0.00672EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•16 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the buyeraddress parameter of the buyerdetailsubmit.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/04 12:00 a.m.•14 views

PT-2024-13774 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue is related to multiple Unauthenticated SQL Injection vulnerabilities. The customer details parameter of the "buyer invoice submit.php" resource does not validate the characters received, and...

9.8CVSS9.6AI score0.00672EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•16 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the id parameter of the partylisteditsubmit.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/04 12:00 a.m.•24 views

PT-2024-13776 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the bank details parameter of the "party submit.php" resource does not validate the characters received, and th...

9.8CVSS9.9AI score0.00672EPSS
SaveExploits1References5
Rows per page
Query Builder