Lucene search
+L

756 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/25 12:00 a.m.•6 views

CVE-2023-3890: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS3.9AI score0.00562EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/25 12:00 a.m.•17 views

Campcodes Beauty Salon Management System 跨站脚本漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes, Inc. A cross-site scripting vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which stems from unknown processing in /admin/editcategory.php that results in cross-site scriptin...

6.1CVSS4.7AI score0.00549EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•14 views

PT-2023-26630 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file /admin/edit category.php. The manipulation of the argument id...

6.1CVSS4.3AI score0.00549EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•22 views

PT-2023-26611 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the contactno argument...

7.5CVSS7AI score0.00641EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/25 12:00 a.m.•20 views

Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown function in /admin/edit-accepted-appointment.php, which results in a sql...

7.5CVSS6.9AI score0.00641EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/24 12:00 a.m.•29 views

Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown section of the file admin/editcategory.php, which results in a sql injection...

7.5CVSS6.8AI score0.00597EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/07/24 12:00 a.m.•20 views

PT-2023-26574 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/edit-services.php. The manipulation of the editid argument leads to SQL injection. The attack can be initiat...

7.5CVSS7.1AI score0.00602EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/24 12:00 a.m.•18 views

Campcodes Beauty Salon Management System SQL注入漏洞

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown section of admin/edit-services.php that causes a sql injection via the...

7.5CVSS6.9AI score0.00602EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/24 12:00 a.m.•7 views

CVE-2023-3872: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

7.5CVSS6.5AI score0.00602EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/24 12:00 a.m.•18 views

PT-2023-26573 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical vulnerability has been found in the Campcodes Beauty Salon Management System. This issue affects the file /admin/edit category.php and is related to the manipulation...

7.5CVSS7.3AI score0.00597EPSS
SaveExploits1References8
OSV
OSV
•added 2023/06/30 7:15 a.m.•15 views

CVE-2023-3473

A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS5.7AI score0.0082EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/05/20 12:00 a.m.•22 views

PT-2023-21638 · Sourcecodester · Sourcecodester Class Scheduling System

Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A critical issue was found in the SourceCodester Class Scheduling System, affecting an unknown functionality of the file /admin/edit subject.php, specifically the GET Parameter...

9.8CVSS7.1AI score0.00754EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/05/20 12:00 a.m.•31 views

SourceCodester Class Scheduling System SQL注入漏洞

Class Scheduling System is a class scheduling system by jkev individual developer. A SQL injection vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by an unknown function in the file /admin/editsubject.php in the component GET Parameter Handler, which...

9.8CVSS7AI score0.00754EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/22 2:15 p.m.•22 views

CVE-2023-1569

A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input alert'1' leads to cross site scripting...

5.4CVSS3.8AI score0.00491EPSS
SaveExploits1References2
OSV
OSV
•added 2023/02/27 12:15 p.m.•18 views

CVE-2023-1061

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated...

8.8CVSS5.8AI score0.00759EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•19 views

Doctors Appointment System SQL注入漏洞

Doctors Appointment System is a doctor appointment system from SourceCodester. An injection vulnerability exists in Doctors Appointment System version 1.0, which stems from unknown processing in the file /admin/edit-doc.php, resulting in an sql injection via the parameter oldmail...

8.8CVSS6.9AI score0.00759EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•16 views

SourceCodester Doctor Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•4 views

CVE-2023-1061: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated...

8.8CVSS5.5AI score0.00759EPSS
SaveExploits1References3
OSV
OSV
•added 2022/11/30 3:15 a.m.•16 views

CVE-2022-45328

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...

7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/11/22 12:00 a.m.•19 views

AeroCMS SQL注入漏洞

AeroCMS is a content management system from AeroCMS, Inc. A security vulnerability exists in AeroCMS v0.0.1, which stems from the postcategoryid parameter of its adminincludeseditpost.php component allowing an attacker to implement SQL injection resulting in access to database information. No...

4.9CVSS7.8AI score0.00782EPSS
SaveExploits1References3
Rows per page
Query Builder