Lucene search
+L

30 matches found

OSV
OSV
added 2022/06/02 2:15 p.m.5 views

CVE-2022-30832

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientassign.php?booking=31&userid=...

7.2CVSS5.8AI score0.00945EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.4 views

CVE-2022-30833

Wedding Management System v1.0 is vulnerable to SQL Injection via /Wedding-Management/admin/clientedit.php?booking=31&userid=...

7.2CVSS5.9AI score0.00958EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.3 views

CVE-2022-30825

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\clientedit.php...

7.2CVSS5.9AI score0.00958EPSS
Exploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.16 views

Sql injection

Wedding Management System v1.0 is vulnerable to SQL Injection via \admin\clientedit.php...

6.5CVSS7.3AI score0.00958EPSS
Exploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.4 views

Wedding Management System SQL注入漏洞

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/clientassign.php page that lacks An attacker can use this vulnerability to execute...

7.2CVSS6AI score0.00958EPSS
Exploits1References2
Prion
Prion
added 2021/10/22 12:15 p.m.16 views

Code injection

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user...

7.5CVSS9.3AI score0.00951EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/10/22 11:23 a.m.21 views

CVE-2021-38459 AUVESY Versiondog

The data of a network capture of the initial handshake phase can be used to authenticate at a SYSDBA level. If a specific .exe is not restarted often, it is possible to access the needed handshake packets between admin/client connections. Using the SYSDBA permission, an attacker can change user...

8.1CVSS9.5AI score0.00951EPSS
Exploits0References1
CVE
CVE
added 2020/06/30 7:40 p.m.52 views

CVE-2020-9413

CVE-2020-9413 affects TIBCO Managed File Transfer Command Center (CC) and Internet Server (IS) up to version 8.2.1 and earlier. The vulnerability resides in the MFT Browser file transfer and MFT Browser admin client components, allowing an attacker to craft a URL that, when visited by an authenti...

9.6CVSS8.1AI score0.01348EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2018/10/19 10:0 p.m.45 views

CVE-2018-18417

In the 3.1 version of Ekushey Project Manager CRM, Stored XSS has been discovered in the input and upload sections, as demonstrated by the name parameter to the index.php/admin/client/create URI...

5.3AI score0.01643EPSS
Exploits6References2
0day.today
0day.today
added 2018/10/17 12:0 a.m.34 views

Ekushey Project Manager CRM 3.1 Cross Site Scripting Vulnerability

Ekushey Project Manager CRM version 3.1 suffers from a persistent cross site scripting vulnerability. Exploit Title: Ekushey Project Manager CRM 3.1 - Cross-site Scripting Exploit Author: Ismail Tasdelen Vendor Homepage: http://creativeitem.com/ Software Link : http://creativeitem.com/demo/ekushe...

5.4AI score0.01643EPSS
Exploits6
Rows per page
Query Builder