Lucene search
+L

4763 matches found

Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•19 views

PT-2024-15587 · Unknown · Code-Projects Human Resource Integrated System

Name of the Vulnerable Software and Affected Versions: code-projects Human Resource Integrated System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /admin route/inc service credits.php. The manipulation of the id argument leads to SQ...

9.8CVSS7.2AI score0.005EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0469: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Human Resource Integrated System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file updatepersonalinfo.php. The manipulation of the argument sex leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•3 views

CVE-2024-0467: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Employee Profile Management System 1.0. Affected is an unknown function of the file editpositionquery.php. The manipulation of the argument posname leads to cross site scripting. It is possible to launch the attack...

6.1CVSS3.9AI score0.0043EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0474: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit h...

9.8CVSS7.1AI score0.00602EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•15 views

PT-2024-15578 · Code Projects · Code-Projects Online Faculty Clearance

Name of the Vulnerable Software and Affected Versions: code-projects Online Faculty Clearance version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component of the file deactivate.php. The manipulation of the haydi argument leads to SQL injection. This issue c...

9.8CVSS8.1AI score0.005EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0466: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Employee Profile Management System 1.0. This issue affects some unknown processing of the file filetable.php. The manipulation of the argument perid leads to sql injection. The exploit has been disclosed to the...

9.8CVSS6.1AI score0.00599EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0473: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Dormitory Management System 1.0. Affected is an unknown function of the file comment.php. The manipulation of the argument com leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•3 views

CVE-2024-0463: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/adminviewinfo.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•2 views

CVE-2024-0464: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Online Faculty Clearance 1.0. This affects an unknown part of the file deletefaculty.php of the component HTTP GET Request Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

9.8CVSS6.5AI score0.00636EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•21 views

PT-2024-15589 · Unknown · Code-Projects Dormitory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Dormitory Management System version 1.0 Description: A vulnerability was found in the code-projects Dormitory Management System, affecting some unknown processing of the file modifyuser.php. The manipulation of the argument mnam...

7.5CVSS6.9AI score0.00558EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0461: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. It is possible to laun...

9.8CVSS6.5AI score0.005EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0462: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designeeviewstatus.php of the component HTTP POST Request Handler. The manipulation of the argument haydi...

9.8CVSS6.6AI score0.00537EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•18 views

PT-2024-15581 · Unknown · Code-Projects Online Faculty Clearance

Name of the Vulnerable Software and Affected Versions: code-projects Online Faculty Clearance version 1.0 Description: A critical vulnerability has been found in the code-projects Online Faculty Clearance. This issue affects the file delete faculty.php of the component HTTP GET Request Handler. T...

9.8CVSS8.2AI score0.00636EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•19 views

PT-2024-15582 · Code Projects · Code-Projects Employee Profile Management System

Name of the Vulnerable Software and Affected Versions: code-projects Employee Profile Management System version 1.0 Description: A problematic vulnerability was found in the code-projects Employee Profile Management System. This issue affects the file download.php, where the manipulation of the...

5.3CVSS7AI score0.00728EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/12 12:00 a.m.•4 views

CVE-2024-0460: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed...

9.8CVSS6.5AI score0.005EPSS
SaveExploits0References2
CVE
CVE
•added 2024/01/10 1:31 a.m.•69 views

CVE-2024-0359

The CVE-2024-0359 entry concerns a SQL injection in code-projects Simple Online Hotel Reservation System 1.0, affecting login.php. The vulnerability arises from unsafely handling the username and password arguments, allowing remote attackers to manipulate SQL queries and potentially compromise co...

9.8CVSS9.7AI score0.00711EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/10 1:31 a.m.•53 views

CVE-2024-0359 code-projects Simple Online Hotel Reservation System login.php sql injection

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...

7.5CVSS10AI score0.00711EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•20 views

PT-2024-15494 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the code-projects Simple Online Hotel Reservation System. The manipulation of the username and password arguments in the file...

9.8CVSS7.8AI score0.00711EPSS
SaveExploits1References9
Prion
Prion
•added 2023/12/31 9:15 a.m.•36 views

Sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

5.8CVSS7.6AI score0.00743EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/31 8:48 a.m.•50 views

CVE-2023-7130 code-projects College Notes Gallery login.php sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

6.3CVSS9.2AI score0.00743EPSS
SaveExploits1References3
Rows per page
Query Builder