Lucene search
+L

63 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/14 12:00 a.m.•4 views

CVE-2023-46022: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter...

7.8CVSS7.4AI score0.00795EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•14 views

PT-2023-29804 · Unknown · Code-Projects Blood Bank

Name of the Vulnerable Software and Affected Versions: Code-Projects Blood Bank version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands. This is achieved by exploiting the bid parameter in the delete.php file. Recommendations: For Code-Projects Blood Bank version 1.0...

7.8CVSS7.8AI score0.00795EPSS
SaveExploits4References3
CVE
CVE
•added 2023/11/14 12:00 a.m.•93 views

CVE-2023-46022

CVE-2023-46022 concerns Code-Projects Blood Bank v1.0, with a SQL Injection in delete.php via the bid parameter. The root cause is improper input handling in delete.php, enabling attackers to execute arbitrary SQL commands. Reported impact includes potential data exposure and unauthorized databas...

7.8CVSS8AI score0.00795EPSS
SaveExploits4References1Affected Software1
CNNVD
CNNVD
•added 2023/11/14 12:00 a.m.•18 views

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system for the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0 that originated from allowing an attacker to run arbitrary SQL commands via the bid parameter in delete.php...

7.8CVSS7.6AI score0.00795EPSS
SaveExploits4References3
GithubExploit
GithubExploit
•added 2023/11/11 10:54 a.m.•39 views

Exploit for SQL Injection in Code-Projects Blood_Bank

CVE-2023-46022-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-...

7.8CVSS8.4AI score0.00795EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2023/11/10 12:00 a.m.•47 views

PT-2023-32501 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A problematic vulnerability was found in the PHPGurukul Restaurant Table Booking System, affecting an unknown functionality of the file booking-details.php of the component...

7.5CVSS6.9AI score0.00959EPSS
SaveExploits0References5
CNVD
CNVD
•added 2017/07/14 12:00 a.m.•5 views

SQL injection vulnerability in the bid parameter of Dongyunchuangda CMSabout.php file

Dongyun Tronda Enterprise CMS is an enterprise website building system. SQL injection vulnerability exists in the bid parameter of the CMSabout.php file, which can be exploited by an attacker to obtain sensitive information from the database...

7.7AI score
SaveExploits0
NVD
NVD
•added 2011/10/09 10:55 a.m.•30 views

CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

7.5CVSS8.4AI score0.01161EPSS
SaveExploits1References4
Prion
Prion
•added 2011/10/09 10:55 a.m.•18 views

Sql injection

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

7.5CVSS9.1AI score0.01161EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/10/09 12:00 a.m.•7 views

CVE-2010-4923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

7.5CVSS6.4AI score0.01161EPSS
SaveExploits1References2
Prion
Prion
•added 2011/01/20 7:00 p.m.•20 views

Sql injection

SQL injection vulnerability in mainxa.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter...

7.5CVSS9.1AI score0.01021EPSS
SaveExploits2References5Affected Software1
Positive Technologies
Positive Technologies
•added 2011/01/20 12:00 a.m.•3 views

PT-2011-2415

Name of the Vulnerable Software and Affected Versions E-PROMPT C BetMore Site Suite versions 4.0 through 4.2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the mainx a.php file. Recommendations For versions 4.0 through...

7.5CVSS0.01021EPSS
SaveExploits2References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/01/20 12:00 a.m.•6 views

CVE-2011-0516: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mainxa.php in E-PROMPT C BetMore Site Suite 4.0 through 4.2.0 allows remote attackers to execute arbitrary SQL commands via the bid parameter...

7.5CVSS6.4AI score0.01021EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/09/23 12:00 a.m.•5 views

CVE-2009-3332: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the JBudgetsMagic comjbudgetsmagic component 0.3.2 through 0.4.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bid parameter in a mybudget action to index.php...

7.5CVSS6.4AI score0.00907EPSS
SaveExploits2References2
NVD
NVD
•added 2009/07/01 1:00 p.m.•36 views

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

7.5CVSS8.4AI score0.00893EPSS
SaveExploits1References1
Prion
Prion
•added 2009/07/01 1:00 p.m.•30 views

Sql injection

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

7.5CVSS9.1AI score0.00893EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2009/07/01 12:26 p.m.•43 views

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

8.4AI score0.00893EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/01 12:00 a.m.•6 views

CVE-2009-2269: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

7.5CVSS6.4AI score0.00893EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/02/02 12:00 a.m.•7 views

CVE-2009-0380: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sigsiu Online Business Index 2 SOBI2, comsobi2 RC 2.8.2 component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the bid parameter in a showbiz action to index.php, a different vector than CVE-2008-0607. NOTE: CVE disputes th...

7.5CVSS6.4AI score0.01126EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/12/15 12:00 a.m.•7 views

CVE-2007-6380: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in e-Xoops exoops 1.08, and 1.05 Rev 1 through 3, allow remote attackers to execute arbitrary SQL commands via the 1 lid parameter to a mylinks/ratelink.php, b adresses/ratefile.php, c mydownloads/ratefile.php, d mysections/ratefile.php, and e...

7.5CVSS6.4AI score0.01044EPSS
SaveExploits8References2
Rows per page
Query Builder