Lucene search
+L

146 matches found

CNNVD
CNNVD
added 2024/03/04 12:0 a.m.7 views

Best POS Management System SQL Injection Vulnerability

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability in the parameter img of the file adminclass.php...

9.8CVSS7.9AI score0.00556EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/01/30 12:0 a.m.10 views

PT-2024-19620 · Bosscms · Bosscms

Name of the Vulnerable Software and Affected Versions: BossCMS version 1.3.0 Description: The issue allows a local attacker to execute arbitrary code and escalate privileges. This is achieved via the init function in the admin.class.php component. Recommendations: For BossCMS version 1.3.0,...

7.8CVSS7.9AI score0.0031EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/01/30 12:0 a.m.20 views

BossCMS Security Breach

Wenzhou Huoyin Information Technology BossCMS is a content management system based on MySQL architecture of self-developed PHP framework by Wenzhou Huoyin Information Technology. A security vulnerability exists in BossCMS v.1.3.0, which is caused by improper privilege management. The vulnerabilit...

7.8CVSS7.9AI score0.0031EPSS
SaveExploits1References3
OSV
OSV
added 2023/07/11 3:15 p.m.8 views

CVE-2023-3617

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file adminclass.php of the component Login Page. The manipulation of the argument username leads to sql injection. It is possible to initiate the...

9.8CVSS5.7AI score0.00819EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/07/11 12:0 a.m.9 views

PT-2023-25470 · Unknown · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best POS Management System version 1.0 Description: A critical issue affects the Login Page component, specifically the file admin class.php. The manipulation of the username argument leads to SQL injection. This issue can be...

9.8CVSS8.1AI score0.00819EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/07/11 12:0 a.m.6 views

Best pos management system SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Best POS Management System version 1.0, which stems from the parameter username in the file adminclass.php that can lead to sql injection...

9.8CVSS7.6AI score0.00819EPSS
SaveExploits1References4
OSV
OSV
added 2023/07/10 6:15 p.m.5 views

CVE-2023-3599

A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function saveuser of the file adminclass.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched...

9.8CVSS5.4AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/07/10 12:0 a.m.7 views

PT-2023-25406 · Sourcecodester · Sourcecodester Best Pos Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best Fee Management System version 1.0 Description: A critical issue has been found, affecting the function save user of the file admin class.php in the component Add User Handler. This leads to improper access controls, allowi...

9.8CVSS7.4AI score0.0072EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/07/10 12:0 a.m.8 views

Best Fee Management System 权限许可和访问控制问题漏洞

Best Fee Management System is a fee management system by Mayuri K. Individual developer. Best Fee Management System version 1.0 has a permissions licensing and access control issue vulnerability that stems from the saveuser function in the adminclass.php file that results in incorrect access...

9.8CVSS6.9AI score0.0072EPSS
SaveExploits0References4
OSV
OSV
added 2023/04/14 8:15 a.m.5 views

CVE-2023-2038

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability affects unknown code of the file adminclass.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

7.5CVSS6.5AI score0.00605EPSS
SaveExploits1References3
Prion
Prion
added 2023/04/14 8:15 a.m.12 views

Sql injection

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been declared as critical. This vulnerability affects unknown code of the file adminclass.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

6.5CVSS7.9AI score0.00605EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/04/14 12:0 a.m.5 views

PT-2023-17434 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found, affecting the admin class.php file, where manipulation of the email argument leads to SQL injection. This can be initiated remotely. Recommendations: Fo...

7.5CVSS7.9AI score0.00605EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:0 a.m.5 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem with the file adminclass.php, where manipulation of the parameter email can lead to sql injection...

7.5CVSS6.9AI score0.00605EPSS
SaveExploits1References4
CNVD
CNVD
added 2023/01/16 12:0 a.m.24 views

Online Food Ordering System SQL Injection Vulnerability (CNVD-2023-04530)

Online Food Ordering System is an online food ordering system. an SQL injection vulnerability exists in Online Food Ordering System, which stems from a problem in the unknown section of the file adminclass.php, where an operation on the parameter email can lead to sql injection. No details of the...

7.5CVSS2.2AI score0.00597EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/01/15 12:0 a.m.7 views

Online Food Ordering System SQL注入漏洞

SourceCodester Online Food Ordering System is an online food ordering system. A SQL injection vulnerability exists in SourceCodester Online Food Ordering System, which stems from a problem with unknown code in the file adminclass.php, where an operation on the parameter username can lead to sql...

7.5CVSS7.3AI score0.00597EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/01/15 12:0 a.m.7 views

PT-2023-16160 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Online Food Ordering System, affecting the Login Module in the file admin class.php. The...

7.5CVSS8AI score0.00597EPSS
SaveExploits1References7
OSV
OSV
added 2022/02/14 9:15 p.m.8 views

CVE-2022-22295

Metinfo v7.5.0 was discovered to contain a SQL injection vulnerability in parameteradmin.class.php via the tablepara parameter...

9.8CVSS7.3AI score0.01575EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/02/14 12:0 a.m.8 views

Metinfo MetInfo SQL注入漏洞

MetInfo is a content management system CMS developed using PHP and Mysql. A SQL injection vulnerability exists in Metinfo, which stems from the product's failure to secure the special characters in the tablepara parameter in the parameteradmin.class.php file. An attacker could exploit this...

9.8CVSS6.1AI score0.01575EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/05/24 12:0 a.m.9 views

MetInfo 路径遍历漏洞

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

9.1CVSS5.6AI score0.02201EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/03/04 12:0 a.m.7 views

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. The system provides management functionality. An SQL injection vulnerability exists in Courier Management System 1.0, which originates in the ref no POST parameter of admin class.php...

6.5CVSS6.7AI score0.013EPSS
SaveExploits1References1
Rows per page
Query Builder