Lucene search
+L

423 matches found

CNVD
CNVD
added 2025/07/18 12:0 a.m.22 views

Vehicle Parking Management System view-outgoingvehicle-detail.php file SQL Injection Vulnerability

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid in file /admin/view-outgoingvehicle-detail.php...

8.8CVSS7.1AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/18 12:0 a.m.4 views

Mobile Shop LoginAsAdmin.php File SQL Injection Vulnerability

Mobile Shop is a mobile store. Mobile Shop suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /LoginAsAdmin.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

9.8CVSS8.2AI score0.00399EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/07/16 12:0 a.m.8 views

The Scratch Channel 安全漏洞

The Scratch Channel is a project website of The Scratch Channel open source. A security vulnerability exists in The Scratch Channel, which stems from a code issue in the api/admin.js file that could lead to a cross-site scripting attack...

5.3CVSS6.2AI score0.00327EPSS
SaveExploits0References2
OSV
OSV
added 2025/07/14 2:15 a.m.6 views

CVE-2025-7559

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits1References5
OSV
OSV
added 2025/07/07 5:15 p.m.12 views

CVE-2025-7136

A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/viewvacancy.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS6.9AI score0.00399EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.7 views

Code-Projects Food Distributor Site 代码注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. A code injection vulnerability exists in Code-Projects Food Distributor Site version 1.0, which originates from cross-site scripting due to incorrect operation of the parameters sitephone/siteemail/address i...

4.8CVSS4.2AI score0.00299EPSS
SaveExploits1References9
CNVD
CNVD
added 2025/06/27 12:0 a.m.5 views

Car Rental System message_admin.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the messageadmin.php file's parameter Message. An attacker can use this vulnerability to execute illegal SQL commands...

9.8CVSS8AI score0.00394EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/24 8:15 p.m.8 views

CVE-2025-6579

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /messageadmin.php. The manipulation of the argument Message leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00394EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/21 5:15 p.m.8 views

CVE-2025-6411

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/changepropic.php. The manipulation of the argument imageid leads to sql injection. The attack can be launched...

8.8CVSS5.8AI score0.0037EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.6 views

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of an externally-entered SQL statement in the parameter editid in the file /admin/edit-art-medium-detail.php. A...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/06/20 1:0 p.m.14 views

CVE-2025-6342 code-projects Online Shoe Store admin_football.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. This issue affects some unknown processing of the file /admin/adminfootball.php. The manipulation of the argument pid leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.6AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/20 9:15 a.m.8 views

CVE-2025-6321

A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.5 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter Username in the file /admin/adminindex.php for externally entered SQL statements. An attacker can exploit this vulnerability ...

9.8CVSS8.2AI score0.00394EPSS
SaveExploits1References5
VulnCheck KEV
VulnCheck KEV
added 2025/06/16 12:0 a.m.5 views

VulnCheck KEV: CVE-2009-1558

Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. encoded dot dot or an absolute pathname in the nextfile parameter...

7.8CVSS6AI score0.28806EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2025/06/11 12:0 a.m.8 views

like-girl 安全漏洞

like-girl is a couple logging tool by the individual developer of kiCode111 in China. A security vulnerability exists in like-girl version 5.2.0, which originates from SQL injection due to incorrect operation of the parameters imgDatd/imgText/imgUrl in the file /admin/ImgAddPost.php...

7.2CVSS5.6AI score0.00357EPSS
SaveExploits1References1
NVD
NVD
added 2025/06/06 11:15 a.m.31 views

CVE-2025-5759

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument editid leads to sql injection. The attack can be initiate...

9.8CVSS0.00438EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/02 12:0 a.m.53 views

CVE-2025-44115

CVE-2025-44115 affects Cotonti Siena v0.9.25. The vulnerability is a cross-site scripting (XSS) flaw in the admin endpoint at /admin.php?m=config&n=edit&o=core&p=title where the value of the title parameter can be manipulated to inject script. According to connected sources, exploitation requires...

5.4CVSS6.5AI score0.00232EPSS
SaveExploits1References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/23 9:37 a.m.8 views

CVE-2024-24161

MRCMS 3.0 contains an Arbitrary File Read vulnerability in /admin/file/edit.do as the incoming path parameter is not filtered...

7.5CVSS7.5AI score0.00689EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:5 a.m.8 views

CVE-2024-7220

A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/printbarcode.php. The manipulation of the argument tbl results in sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS7.2AI score0.00581EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:19 a.m.8 views

CVE-2024-10745

A vulnerability was found in PHPGurukul Online Shopping Portal 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin/assets/plugins/DataTables/media/unittesting/templates/deferredtable.php. The manipulation of the argument scripts leads to...

6.1CVSS5.2AI score0.00377EPSS
SaveExploits1References1
Rows per page
Query Builder