Lucene search
+L

4763 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•4 views

CVE-2024-11245: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /editar-produto.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS6.4AI score0.00565EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•3 views

CVE-2024-11243: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

6.9CVSS3.8AI score0.00635EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•4 views

CVE-2024-11259: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Farmacia 1.0. This issue affects some unknown processing of the file /fornecedores.php. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the...

6.1CVSS3.5AI score0.00429EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•5 views

CVE-2024-11244: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Farmacia 1.0. This vulnerability affects unknown code of the file /editar-cliente.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public a...

9.8CVSS6.4AI score0.00722EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•15 views

PT-2024-16860 · Code Projects · Code-Projects Inventory Management

Name of the Vulnerable Software and Affected Versions: code-projects Inventory Management version 1.0 Description: A critical issue has been identified, affecting the /model/editProduct.php file. The manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS7.1AI score0.00716EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•24 views

PT-2024-16853 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop Store version 1.0 Description: A problematic issue has been found in the code-projects Online Shop Store, affecting an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to...

6.9CVSS6.7AI score0.00635EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•18 views

PT-2024-16855 · Code Projects · Code-Projects Farmacia

Name of the Vulnerable Software and Affected Versions: code-projects Farmacia version 1.0 Description: A critical issue has been found in the processing of the file /editar-produto.php, where the manipulation of the id argument leads to SQL injection. This issue can be exploited remotely...

7.5CVSS8AI score0.00565EPSS
SaveExploits1References8
OSV
OSV
•added 2024/11/13 4:15 p.m.•17 views

CVE-2024-50969

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

6.1CVSS5.9AI score0.00517EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/13 4:15 p.m.•42 views

CVE-2024-50969

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

6.1CVSS0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/13 12:00 a.m.•101 views

CVE-2024-50969

CVE-2024-50969 affects Code-projects Jonnys Liquor 1.0 in browse.php, where a reflected XSS is possible via the search parameter. The vulnerability allows remote attackers to inject arbitrary scripts/HTML. Documents indicate this is a reflected XSS with user interaction required; no official patc...

6.1CVSS5.8AI score0.00517EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2024/11/12 3:15 p.m.•59 views

CVE-2024-11127

A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploi...

8.8CVSS0.00509EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/12 3:00 p.m.•17 views

CVE-2024-11127 code-projects Job Recruitment admin.php sql injection

A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploi...

6.5CVSS7.3AI score0.00509EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/12 3:00 p.m.•47 views

CVE-2024-11127 code-projects Job Recruitment admin.php sql injection

A vulnerability was found in code-projects Job Recruitment up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file admin.php. The manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploi...

6.5CVSS0.00509EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/12 2:15 a.m.•20 views

CVE-2024-11099

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/12 2:00 a.m.•14 views

CVE-2024-11099 code-projects Job Recruitment login.php sql injection

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7.5AI score0.00604EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/12 2:00 a.m.•50 views

CVE-2024-11099 code-projects Job Recruitment login.php sql injection

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

7.5CVSS0.00604EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/12 2:00 a.m.•68 views

CVE-2024-11099

CVE-2024-11099 affects code-projects Job Recruitment 1.0, exploiting an SQL injection in the /login.php page via the email parameter. The vulnerability is reported as remote and has been disclosed publicly. Multiple connected documents confirm the issue and point to a code path involving user inp...

9.8CVSS7.7AI score0.00604EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/12 12:31 a.m.•21 views

CVE-2024-11096 code-projects Task Manager newProject.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Task Manager 1.0. This affects an unknown part of the file /newProject.php. The manipulation of the argument projectName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.3AI score0.00464EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/12 12:31 a.m.•78 views

CVE-2024-11096

CVE-2024-11096 affects code-projects Task Manager 1.0. The vulnerability is an SQL injection in the /newProject.php page, triggered by manipulating the projectName parameter. Exploitation is possible remotely, and public exploit information exists. The CVSS data across sources indicates various i...

6.5CVSS6.7AI score0.00464EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/12 12:00 a.m.•31 views

PT-2024-16760 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment versions prior to the latest release Description: A critical issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to SQL injection. The attack may be initiate...

9.8CVSS8AI score0.00604EPSS
SaveExploits1References20
Rows per page
Query Builder