Lucene search
+L

396 matches found

CNNVD
CNNVD
•added 2025/07/07 12:00 a.m.•26 views

CampCodes Complaint Management System 注入漏洞

CampCodes Complaint Management System is a complaint management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Complaint Management System version 1.0, which stems from improper handling of the parameter Username in the file /admin/index.php, which could lead to...

9.8CVSS7.8AI score0.00554EPSS
SaveExploits1References6
OSV
OSV
•added 2025/06/22 12:15 a.m.•16 views

CVE-2025-6447

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

9.8CVSS5.7AI score0.00481EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/22 12:00 a.m.•23 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file...

9.8CVSS7.8AI score0.00481EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•15 views

Code-Projects Client Details System 注入漏洞

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /clientdetails/admin/index.php. An attacker can exploit this...

9.8CVSS8AI score0.00481EPSS
SaveExploits1References6
OSV
OSV
•added 2025/06/20 4:15 a.m.•12 views

CVE-2025-6306

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS5.8AI score0.00481EPSS
SaveExploits1References5
OSV
OSV
•added 2025/06/04 9:15 a.m.•25 views

CVE-2025-5581

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument User leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS5.8AI score0.00584EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•16 views

CodeAstro Real Estate Management System SQL注入漏洞

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which is caused by incorrect manipulation of the parameter User in the file /admin/index.php...

9.8CVSS7.8AI score0.00584EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/05/23 9:08 a.m.•14 views

CVE-2024-5428

A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function saveproduct of the file /admin/index.php?page=manageproduct of the component HTTP POST Request Handler. The manipulation leads to cross-site reque...

6.9CVSS7.1AI score0.00335EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:56 a.m.•19 views

CVE-2023-34751

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the gid parameter at admin/index.php?mode=user=groups=edit...

9.8CVSS8.2AI score0.04228EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:27 a.m.•18 views

CVE-2023-34754

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the pid parameter at admin/index.php?mode=settings=plugins=edit...

9.8CVSS8.2AI score0.03449EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:27 a.m.•20 views

CVE-2023-34755

bloofox v0.5.2.1 was discovered to contain a SQL injection vulnerability via the userid parameter at admin/index.php?mode=user=edit...

9.8CVSS8.2AI score0.04228EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 3:18 a.m.•21 views

CVE-2023-2349

A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument page leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS6.1AI score0.00564EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 6:44 p.m.•16 views

CVE-2021-40669

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file...

9.8CVSS8.2AI score0.0128EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 9:22 a.m.•24 views

CVE-2019-17522

A stored XSS vulnerability was discovered in Hotaru CMS v1.7.2 via the adminindex.php?page=settings SITE NAME field aka SITENAME, a related issue to CVE-2011-4709.1...

4.8CVSS5.8AI score0.01981EPSS
SaveExploits4References1
CNVD
CNVD
•added 2025/05/22 12:00 a.m.•13 views

Auto Taxi Stand Management System /admin/index.php File SQL Injection Vulnerability

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in the file /admin/index.php. An...

9.8CVSS8.3AI score0.00584EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/19 5:15 p.m.•16 views

CVE-2025-4941

A vulnerability, which was classified as critical, was found in PHPGurukul Credit Card Application Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

9.8CVSS5.7AI score0.00584EPSS
SaveExploits1References5
OSV
OSV
•added 2025/05/19 6:15 a.m.•12 views

CVE-2025-4913

A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.8AI score0.00584EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•14 views

PHPGurukul Auto Taxi Stand Management System 安全漏洞

Auto Taxi Stand Management System is an auto cab stand management system. Auto Taxi Stand Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter Username in the file /admin/index.php. An...

9.8CVSS8.2AI score0.00584EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/19 12:00 a.m.•15 views

PHPGurukul Credit Card Application Management System 注入漏洞

Credit Card Application Management System is a credit card application management system. Credit Card Application Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file...

9.8CVSS7.8AI score0.00584EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/18 12:00 a.m.•23 views

PHPGurukul News Portal 注入漏洞

News Portal is a news portal. News Portal suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /admin/index.php. An attacker can exploit this vulnerability to execute illegal SQL commands ...

9.8CVSS7.8AI score0.00581EPSS
SaveExploits1References7
Rows per page
Query Builder