Lucene search
K

22 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:51 a.m.5 views

CVE-2020-10418

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-attachments.php by adding a question mark ? followed by the payload...

4.8CVSS6.1AI score0.00321EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 12:49 a.m.3 views

CVE-2025-10418

A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewstudents.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made availab...

8.8CVSS7.1AI score0.00078EPSS
Exploits1References1
Circl
Circl
added 2025/09/15 3:22 a.m.7 views

CVE-2025-10418

creationtimestamp| type| source ---|---|--- 2025-09-15 03:22:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytu37ttil2u...

8.8CVSS5.8AI score0.00078EPSS
Exploits1References1
NVD
NVD
added 2025/09/15 1:15 a.m.3 views

CVE-2025-10418

A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewstudents.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made availab...

8.8CVSS0.00078EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/05/22 7:30 a.m.4 views

CVE-2019-10418

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

9.9CVSS6.9AI score0.00101EPSS
Exploits0References1
Circl
Circl
added 2024/10/27 3:54 p.m.0 views

CVE-2024-10418

creationtimestamp| type| source ---|---|--- 2024-10-27 15:54:14+00:00| seen| https://t.me/cvedetector/9057...

9.8CVSS6.2AI score0.00113EPSS
Exploits1References1
OSV
OSV
added 2024/10/27 2:15 p.m.1 views

CVE-2024-10418

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /file/infoAdd.php. The manipulation of the argument bg leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/10/27 1:31 p.m.9 views

CVE-2024-10418 code-projects Blood Bank Management System infoAdd.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /file/infoAdd.php. The manipulation of the argument bg leads to sql injection. The attack can be launched remotely...

6.5CVSS6.8AI score0.00113EPSS
Exploits1References5
CVE
CVE
added 2024/10/27 1:31 p.m.42 views

CVE-2024-10418

The CVE-2024-10418 entry affects code-projects Blood Bank Management System 1.0. Concrete details from connected documents confirm a vulnerability in the /file/infoAdd.php file where manipulating the bg parameter triggers an SQL injection. The issue can be exploited remotely and has been publicly...

9.8CVSS7AI score0.00113EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2024/10/27 1:31 p.m.14 views

CVE-2024-10418 code-projects Blood Bank Management System infoAdd.php sql injection

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /file/infoAdd.php. The manipulation of the argument bg leads to sql injection. The attack can be launched remotely...

6.5CVSS0.00113EPSS
Exploits1References5
NVD
NVD
added 2020/03/12 2:15 p.m.12 views

CVE-2020-10418

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-attachments.php by adding a question mark ? followed by the payload...

4.8CVSS5AI score0.00321EPSS
Exploits1References2
Cvelist
Cvelist
added 2020/03/12 1:4 p.m.16 views

CVE-2020-10418

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/manage-attachments.php by adding a question mark ? followed by the payload...

5AI score0.00321EPSS
Exploits1References2
CVE
CVE
added 2020/03/12 1:4 p.m.45 views

CVE-2020-10418

CVE-2020-10418 corresponds to a reflected XSS in Chadha PHPKB Standard Multi-Language 9. Red Hat entries for CVE-2020-10418 and related CVEs describe the flaw as URIs handled in admin/header.php enabling reflected XSS in admin/manage-attachments.php by appending a payload after a question mark. T...

4.8CVSS4.9AI score0.00321EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2019/09/25 3:5 p.m.69 views

CVE-2019-10418

The CVE-2019-10418 vulnerability affects the Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin. It stems from a custom script-security whitelist that improperly allowed invocation of arbitrary methods, bypassing the usual sandbox protections. Public references describe the issue and its i...

9.9CVSS9.5AI score0.00101EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/09/25 3:5 p.m.11 views

CVE-2019-10418

Jenkins Kubernetes :: Pipeline :: Arquillian Steps Plugin provides a custom whitelist for script security that allowed attackers to invoke arbitrary methods, bypassing typical sandbox protection...

9.6AI score0.00101EPSS
Exploits0References2
Cvelist
Cvelist
added 2018/04/18 2:0 p.m.16 views

CVE-2016-10418

In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9650, SD 210/SD 212/SD 205, SD 425, SD 430, SD 450, SD 625, SD 650/52, SD 820, SD 820A, and SD 835, HLOS can enable PMIC debug through...

7.9AI score0.00164EPSS
Exploits0References2
CVE
CVE
added 2018/04/18 2:0 p.m.49 views

CVE-2016-10418

The CVE-2016-10418 entry describes an Android-related flaw where HLOS could enable PMIC debugging through TCSR_QPDI_DISABLE_CFG due to improper access control, affecting Qualcomm Snapdragon Automotive, Snapdragon Mobile, and Snapdragon Wear devices (covering MDM9206/9650, various SD chips). The r...

7.5CVSS7.8AI score0.00164EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/10/19 5:29 p.m.15 views

CVE-2017-10418

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PeopleSoft CDA. The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

6.4CVSS5.3AI score0.00208EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2017/10/19 5:0 p.m.10 views

CVE-2017-10418

Vulnerability in the PeopleSoft Enterprise PT PeopleTools component of Oracle PeopleSoft Products subcomponent: PeopleSoft CDA. The supported version that is affected is 8.56. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft...

5.9AI score0.00208EPSS
Exploits0References3
CVE
CVE
added 2017/10/19 5:0 p.m.57 views

CVE-2017-10418

The CVE-2017-10418 entry refers to Oracle PeopleSoft Products, specifically the PeopleSoft Enterprise PT PeopleTools component subcomponent PeopleSoft CDA, affected in version 8.56. The vulnerability is exploitable by a low-privileged attacker over the network via HTTP, with potential impact to c...

6.4CVSS5.6AI score0.00208EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder