Lucene search
+L

615 matches found

CNNVD
CNNVD
added 2024/04/07 12:00 a.m.10 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/edit.php file...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/04/07 12:00 a.m.9 views

Online Courseware SQL注入漏洞

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/editt.php file...

9.8CVSS7.3AI score0.00941EPSS
SaveExploits1References5
OSV
OSV
added 2024/04/03 1:16 p.m.7 views

CVE-2024-3257

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

7.2CVSS5.8AI score0.00706EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/03 1:16 p.m.10 views

CVE-2024-3256

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

7.2CVSS5.7AI score0.00706EPSS
SaveExploits1References4
OSV
OSV
added 2024/04/03 12:15 p.m.7 views

CVE-2024-3254

A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown processing of the file admin/editadmin.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

7.2CVSS5.7AI score0.00706EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.7 views

PT-2024-24680 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting an unknown functionality of the file admin/edit activity.php. The...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.8 views

Internship Portal Management System 安全漏洞

Internship Portal Management System is an internship portal management system by ChatikoboL individual developer. A security vulnerability exists in version 1.0 of the Internship Portal Management System due to an SQL injection vulnerability in the adminid parameter of the admin/editadmin.php fil...

7.2CVSS6.9AI score0.00706EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.9 views

PT-2024-24659 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting the processing of the file admin/edit admin.php. The manipulation...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.9 views

PT-2024-24691 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System, affecting some unknown functionality of the file admin/edit activity query.php...

7.2CVSS7.1AI score0.00706EPSS
SaveExploits1References7
Packet Storm
Packet Storm
added 2024/04/02 12:00 a.m.550 views

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

7AI score
SaveExploits5
OSV
OSV
added 2024/04/01 4:15 p.m.5 views

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

9.8CVSS5.8AI score0.00734EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/01 12:00 a.m.8 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/edituserlogin.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/04/01 12:00 a.m.10 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editvirtualsiteinfo.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.6 views

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an SQL injection issue in the /admin/editsupplier.php file...

7.2CVSS8AI score0.00547EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/29 1:43 a.m.7 views

CVE-2024-1928

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

7.2CVSS5.6AI score0.00714EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/17 6:15 p.m.5 views

CVE-2024-22715

Stupid Simple CMS =1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin-edit.php...

8.8CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2024/01/17 6:15 p.m.22 views

Cross site request forgery (csrf)

Stupid Simple CMS =1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin-edit.php...

6.8CVSS7.8AI score0.00303EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/01/17 12:00 a.m.8 views

Stupid Simple CMS Security Vulnerability

Stupid Simple CMS is a content management system by codelyfe individual developer. A security vulnerability exists in Stupid Simple CMS version 1.2.4, which contains a cross-site request forgery CSRF vulnerability via the component /admin-edit.php...

8.8CVSS6.8AI score0.00303EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/17 12:00 a.m.11 views

PT-2024-19535 · Unknown · Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: Stupid Simple CMS versions =1.2.4 Description: A Cross-Site Request Forgery CSRF issue was discovered in the /admin-edit.php component. This allows for potential unauthorized actions on the affected system. Recommendations: For versions =1.2....

8.8CVSS8.6AI score0.00303EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/16 6:15 p.m.9 views

CVE-2024-22625

Complete Supplier Management System v1.0 is vulnerable to SQL Injection via /SupplyManagementSystem/admin/editcategory.php?id=...

7.2CVSS5.8AI score0.00745EPSS
SaveExploits1References1
Rows per page
Query Builder