Lucene search
+L

3 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/04 12:00 a.m.•0 views

CVE-2023-50753: Improper Neutralization of Special Elements used in an SQL Command

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the user/updateprofile.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00672EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/04 12:00 a.m.•0 views

CVE-2023-50743: Improper Neutralization of Special Elements used in an SQL Command

Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'dd' parameter of the registration.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00672EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/04 12:00 a.m.•19 views

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in Online Notice Board System v1.0, which occurs when the dd parameter of the registration.php page is processed without filtering and sent to the database for processing...

9.8CVSS8AI score0.00672EPSS
SaveExploits1References3
Rows per page
Query Builder