Lucene search
+L

361 matches found

CNNVD
CNNVD
added 2024/10/15 12:0 a.m.13 views

SourceCodester Online Eyewear Shop SQL注入漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for eyewear business and its potential customers. A SQL injection vulnerability exists in SourceCodester...

9.8CVSS7.1AI score0.00515EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/09/22 12:0 a.m.8 views

PT-2024-39419 · Code Projects · Code-Projects Restaurant Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Reservation System version 1.0 Description: A critical issue affects the processing of the file index.php, where the manipulation of the date argument leads to SQL injection. The attack can be initiated remotely. The...

9.8CVSS9.2AI score0.00736EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2024/09/22 12:0 a.m.6 views

Code-Projects Restaurant Reservation System SQL注入漏洞

Code-Projects Restaurant Reservation System is a Code-Projects open source restaurant reservation system. A SQL injection vulnerability exists in Code-Projects Restaurant Reservation System version 1.0, which stems from an incorrect operation of the parameter date that can lead to SQL injection...

9.8CVSS7.9AI score0.00736EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/25 12:0 a.m.8 views

SourceCodester Daily Calories Monitoring Tool 跨站脚本漏洞

SourceCodester Daily Calories Monitoring Tool is a daily calories monitoring tool from SourceCodester, Inc. A cross-site scripting vulnerability exists in version 1.0 of the SourceCodester Daily Calories Monitoring Tool, which stems from a cross-site scripting vulnerability in the...

5.4CVSS4.5AI score0.00386EPSS
SaveExploits1References6
OSV
OSV
added 2024/06/18 5:15 p.m.5 views

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

6.1CVSS5.6AI score0.00349EPSS
SaveExploits1References2
NVD
NVD
added 2024/06/18 5:15 p.m.39 views

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

6.1CVSS0.00349EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/06/18 12:0 a.m.33 views

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

0.00349EPSS
SaveExploits1References2
CVE
CVE
added 2024/06/18 12:0 a.m.55 views

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 is affected by a reflected cross-site scripting (XSS) vulnerability triggered via the Date parameter in index.php. The issue is documented across multiple sources (CVE-2024-37800; NVD; CNNVD; CVELIST; PT-2024-27759; vulnrichment) and is described as...

6.1CVSS6.2AI score0.00349EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/06/18 12:0 a.m.17 views

CVE-2024-37800

CodeProjects Restaurant Reservation System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the Date parameter at index.php...

6.2AI score0.00349EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/06/18 12:0 a.m.6 views

CodeProjects Restaurant Reservation System Cross-Site Scripting Vulnerability

CodeProjects Restaurant Reservation System is a Php based restaurant reservation system. A cross-site scripting vulnerability exists in CodeProjects Restaurant Reservation System v1.0, which originates from a cross-site scripting vulnerability in the Date parameter of index.php...

6.1CVSS6.2AI score0.00349EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/06/18 12:0 a.m.11 views

PT-2024-27759

Name of the Vulnerable Software and Affected Versions CodeProjects Restaurant Reservation System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the Date parameter at the "index.php" endpoint. There is no informatio...

6.1CVSS5.6AI score0.00349EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.5 views

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter date that can lead to sq...

6.5CVSS7.3AI score0.00391EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/22 12:0 a.m.6 views

PT-2024-35202 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the file /view/teacher salary invoice1.php, where the manipulation of the date argument leads to SQL injection. The attack can be...

6.5CVSS7.2AI score0.00391EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/05/20 12:0 a.m.8 views

PT-2024-34524 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /view/student payment invoice1.php. The manipulation of the date argument lead...

6.5CVSS7.4AI score0.0044EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/05/06 12:0 a.m.16 views

PT-2024-31453 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting an unknown part of the file /view/teacher salary invoice1.php. The manipulation of th...

6.1CVSS4.3AI score0.0059EPSS
SaveExploits1References8
NVD
NVD
added 2024/03/19 7:15 p.m.9 views

CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

9.8CVSS7.9AI score0.00519EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/03/19 12:0 a.m.11 views

CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

8.5AI score0.00519EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/19 12:0 a.m.22 views

CVE-2024-28303

Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php...

8.1AI score0.00519EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/19 12:0 a.m.8 views

PT-2024-22386 · Unknown · Open Source Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: Open Source Medicine Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the date parameter at the "/admin/reports/index.php" API endpoint. Recommendations: F...

9.8CVSS7.4AI score0.00519EPSS
SaveExploits0References6
CVE
CVE
added 2024/03/19 12:0 a.m.51 views

CVE-2024-28303

Open Source Medicine Ordering System v1.0 is vulnerable to a SQL injection via the date parameter in /admin/reports/index.php. Affected component: the web application’s reports endpoint. Root cause (as described): unsafely interpolating user-supplied date input into SQL queries leading to potenti...

9.8CVSS8.2AI score0.00519EPSS
SaveExploits0References2
Rows per page
Query Builder