Lucene search
+L

1082 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 4:54 a.m.10 views

CVE-2024-10968

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /contactprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotel...

9.8CVSS7.4AI score0.00698EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/01/30 1:00 a.m.13 views

CVE-2025-0847 1000 Projects Employee Task Management System Login index.php sql injection

A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...

7.5CVSS7.5AI score0.00599EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/30 12:00 a.m.67 views

CVE-2025-0846

The CVE-2025-0846 vulnerability affects 1000 Projects Employee Task Management System v1.0, specifically in /admin/AdminLogin.php where the email parameter is susceptible to SQL injection. Attackers can remotely exploit this flaw, and public disclosures exist. Multiple feeds (NVD, Red Hat, CVE re...

9.8CVSS7.5AI score0.00516EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.12 views

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device, related to buffer overflow in dynamic memory, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause a service failure...

10CVSS8.7AI score0.00862EPSS
SaveExploits0References2Affected Software14
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.20 views

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 device, caused by buffer overflows, allows a hacker to trigger a maintenance failure.

The vulnerability of the microprogramming software of the Rockwell Automation PowerMonitor 1000 monitoring and control device is caused by buffer overflow. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

10CVSS8.5AI score0.00517EPSS
SaveExploits0References2Affected Software14
Tenable Nessus
Tenable Nessus
added 2025/01/24 12:00 a.m.40 views

SonicWall SMA 1000 Series < 12.4.3-02854 Pre-authentication Remote Command Execution (SNWLID-2025-0002)

The remote host is a SonicWall SMA 1000 Series device that may be affected by a pre-authentication remote command execution vulnerability: - Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console AMC and Central Managemen...

9.8CVSS9.2AI score0.23432EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/01/24 12:00 a.m.11 views

The vulnerability of the device management consoles (AMS) and central control consoles (SMM) of the SonicWall SMA 1000 series microprogrammed network interface controllers allows attackers to execute arbitrary operating system commands.

The vulnerability of the device management consoles AMS and central control consoles SMM of SonicWall’s SMA 1000 series microprogrammed network interface controllers is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a remote attacker to execute...

10CVSS8.5AI score0.23432EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/01/17 7:31 p.m.40 views

CVE-2025-0536 1000 Projects Attendance Tracking Management System edit_action.php sql injection

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

6.5CVSS0.0055EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/31 12:00 a.m.6 views

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system by 1000 Projects. An injection vulnerability exists in 1000 Projects Beauty Parlour Management System version 1.0, which stems from an incorrect manipulation of the parameter sids that can lead to SQL...

9.8CVSS7AI score0.00649EPSS
SaveExploits1References5
NVD
NVD
added 2024/12/30 4:15 a.m.26 views

CVE-2024-13037

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

9.8CVSS0.00435EPSS
SaveExploits1References5
NVD
NVD
added 2024/12/29 4:15 a.m.28 views

CVE-2024-13003

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /updateed.php. The manipulation of the argument eid leads to sql injection. The attack may be launched remotely. The...

9.8CVSS0.0068EPSS
SaveExploits1References5
NVD
NVD
added 2024/12/29 4:15 a.m.22 views

CVE-2024-13002

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /orderprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely...

9.8CVSS0.00649EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/12/29 3:31 a.m.35 views

CVE-2024-13002 1000 Projects Bookstore Management System order_process.php sql injection

A vulnerability was found in 1000 Projects Bookstore Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /orderprocess.php. The manipulation of the argument fnm leads to sql injection. The attack can be launched remotely...

7.5CVSS0.00649EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/12/26 8:31 p.m.16 views

CVE-2024-12965 1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /updateexdetail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit h...

7.5CVSS7.8AI score0.00611EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/12/26 8:31 p.m.41 views

CVE-2024-12965 1000 Projects Portfolio Management System MCA update_ex_detail.php sql injection

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /updateexdetail.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit h...

7.5CVSS0.00611EPSS
SaveExploits1References5
CVE
CVE
added 2024/12/26 8:31 p.m.69 views

CVE-2024-12965

CVE-2024-12965 : In 1000 Projects Portfolio Management System MCA v1.0, the update_ex_detail.php script unsafely uses the parameter q, enabling SQL injection. This is a remote, unauthenticated vulnerability with potential data read/modify/delete, and possibly code execution as implied by affected...

9.8CVSS7.5AI score0.00611EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2024/12/26 6:15 p.m.27 views

CVE-2024-12961

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /updateachdetails.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS0.00649EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/12/26 6:00 p.m.10 views

CVE-2024-12961 1000 Projects Portfolio Management System MCA update_ach_details.php sql injection

A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA 1.0. Affected is an unknown function of the file /updateachdetails.php. The manipulation of the argument q leads to sql injection. It is possible to launch the attack remotely. The exploi...

7.5CVSS7.4AI score0.00649EPSS
SaveExploits1References5
CVE
CVE
added 2024/12/26 6:00 p.m.68 views

CVE-2024-12961

CVE-2024-12961 affects 1000 Projects Portfolio Management System MCA 1.0. A vulnerability in an unknown function of the file /update_ach_details.php allows manipulation of the q parameter to trigger SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclose...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References5Affected Software1
CVE
CVE
added 2024/12/26 5:31 p.m.64 views

CVE-2024-12960

CVE-2024-12960 affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is in the processing of the file /update_edu_details.php, where the query parameter q can be manipulated to trigger an SQL injection. Attacks are described as remote/network-based, with the exploit disclos...

9.8CVSS7.5AI score0.00749EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder