Lucene search
+L

26 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/25 12:00 a.m.•0 views

CVE-2024-12926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

8.8CVSS5.5AI score0.00518EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/05 4:15 p.m.•26 views

CVE-2024-12231

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS0.00698EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/12/05 4:00 p.m.•15 views

CVE-2024-12231 CodeZips Project Management System index.php sql injection

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

7.5CVSS7.3AI score0.00698EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/12/05 4:00 p.m.•38 views

CVE-2024-12231 CodeZips Project Management System index.php sql injection

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

7.5CVSS0.00698EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/05 4:00 p.m.•2124 views

CVE-2024-12231

CodeZips Project Management System 1.0 contains an SQL injection vulnerability in /index.php, triggered by manipulating the email parameter. Root cause is improper input handling, enabling remote exploitation with high impact on confidentiality, integrity, and availability. Public exploit informa...

9.8CVSS7.5AI score0.00698EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•1 views

CVE-2024-12231: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in CodeZips Project Management System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS5.5AI score0.00698EPSS
SaveExploits1References1
Rows per page
Query Builder