Lucene search
K

71 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:22 a.m.2 views

CVE-2024-2715

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...

6.1CVSS6AI score0.00069EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/03/26 11:31 p.m.10 views

CVE-2025-2715

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

5.1CVSS6.3AI score0.00253EPSS
Exploits0References1
NVD
NVD
added 2025/03/24 11:15 p.m.8 views

CVE-2025-2715

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

5.1CVSS0.00253EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/03/24 10:31 p.m.16 views

CVE-2025-2715 timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

5.1CVSS0.00253EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/03/24 10:31 p.m.4 views

CVE-2025-2715 timschofield webERP Confirm Dispatch and Invoice Page ConfirmDispatch_Invoice.php cross site scripting

A vulnerability classified as problematic has been found in timschofield webERP up to 5.0.0.rc+13. This affects an unknown part of the file ConfirmDispatchInvoice.php of the component Confirm Dispatch and Invoice Page. The manipulation of the argument Narrative leads to cross site scripting. It i...

5.1CVSS6.2AI score0.00253EPSS
Exploits0References4
CVE
CVE
added 2025/03/24 10:31 p.m.57 views

CVE-2025-2715

The CVE-2025-2715 entry describes a cross-site scripting flaw affecting timschofield webERP up to 5.0.0.rc+13, in ConfirmDispatch_Invoice.php (Narrative parameter). Remote exploitation is possible; multiple sources note the vulnerability and advise applying a patch. The initial disclosure indicat...

5.1CVSS6.2AI score0.00253EPSS
Exploits0References4
Cvelist
Cvelist
added 2024/03/20 8:0 p.m.18 views

CVE-2024-2715 Campcodes Complete Online DJ Booking System user-search.php cross site scripting

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...

4CVSS4.1AI score0.00069EPSS
Exploits1References3
Circl
Circl
added 2023/05/20 7:23 a.m.1 views

CVE-2023-2715

creationtimestamp| type| source ---|---|--- 2023-05-20 07:23:37+00:00| seen| https://t.me/cibsecurity/64478...

4.3CVSS6.2AI score0.0021EPSS
Exploits0References1
CVE
CVE
added 2023/05/20 2:3 a.m.43 views

CVE-2023-2715

CVE-2023-2715 concerns the Groundhogg WordPress plugin. Public records show vulnerable versions up to 2.7.9.8 where a missing capability check in the submit_ticket function can allow an authenticated user to modify data or create an admin account via a ticket that includes site data and a login l...

4.3CVSS4.6AI score0.0021EPSS
Exploits0References3Affected Software1
Circl
Circl
added 2022/08/09 12:24 p.m.0 views

CVE-2022-2715

creationtimestamp| type| source ---|---|--- 2022-08-09 12:24:26+00:00| seen| https://t.me/cibsecurity/47766...

9.8CVSS8.7AI score0.0031EPSS
Exploits1References1
Cvelist
Cvelist
added 2022/08/09 6:50 a.m.16 views

CVE-2022-2715 SourceCodester Employee Management System eloginwel.php sql injection

A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

6.3CVSS10AI score0.0031EPSS
Exploits1References2
CVE
CVE
added 2022/08/09 6:50 a.m.48 views

CVE-2022-2715

CVE-2022-2715 affects SourceCodester Employee Management System; the eloginwel.php file has a flaw where manipulating the id parameter enables SQL injection. The vulnerability can be exploited remotely and the exploit has been disclosed publicly (VDB-205834). Based on the provided documents, ther...

9.8CVSS8.4AI score0.0031EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2020/01/15 5:15 p.m.8 views

CVE-2020-2715

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.5CVSS4.5AI score0.00255EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/01/15 4:34 p.m.13 views

CVE-2020-2715

Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications component: Core. Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

5.4CVSS5AI score0.00255EPSS
Exploits0References1
CVE
CVE
added 2020/01/15 4:34 p.m.41 views

CVE-2020-2715

CVE-2020-2715 affects Oracle Banking Corporate Lending (Core) within Oracle Financial Services Applications. Affected versions: 12.3.0–12.4.0 and 14.0.0–14.3.0. The vulnerability permits a low-privilege, network-accessible attacker over HTTP to read and modify data (update/insert/delete) in the a...

5.5CVSS4.8AI score0.00255EPSS
Exploits0References1Affected Software1
Circl
Circl
added 2020/01/15 12:39 a.m.3 views

CVE-2011-2715

creationtimestamp| type| source ---|---|--- 2020-01-15 00:39:11+00:00| seen| https://t.me/cibsecurity/9185...

9.8CVSS8.7AI score0.00496EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/01/14 9:22 p.m.11 views

CVE-2011-2715

An SQL Injection vulnerability exists in Drupal 6.20 with Data 6.x-1.0-alpha14 due to insufficient sanitization of table names or column names...

9.9AI score0.00496EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.8 views

Rockwell Automation/Allen-Bradley PanelView 5500 2715-B15CA HMI Terminal

Binary data 754886.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.4 views

Rockwell Automation/Allen-Bradley PanelView 5500 2715-T9WD HMI Terminal

Binary data 754875.prm...

7.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2019/05/08 12:0 a.m.7 views

Rockwell Automation/Allen-Bradley PanelView 5500 2715-T7CD HMI Terminal

Binary data 754871.prm...

7.3AI score
Exploits0
Rows per page
Query Builder