Lucene search
+L

10440 matches found

CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

Kashipara Online Furniture Shopping Ecommerce Website 安全漏洞

Kashipara Online Furniture Shopping Ecommerce Website is a fast online shopping ecommerce website from Kashipara. A security vulnerability exists in Kashipara Online Furniture Shopping Ecommerce Website version 1.0, which stems from an unvalidated recoveremail parameter in userpasswordrecover.php...

6.5CVSS7.7AI score0.00258EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/11/17 12:00 a.m.•20 views

EUVD-2024-55092

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recoveremail parameter in userpasswordrecover.php...

6.5CVSS7.5AI score0.00258EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•8 views

CVE-2024-44648

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php...

5.8AI score0.00258EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/17 12:00 a.m.•48 views

CVE-2024-44648

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection due to a lack of proper validation for externally entered SQL statements. The vulnerability specifically affects the id and adminremark parameters within the quote-details.php file. An attacker can exploit this flaw to execute illegal SQL co...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•23 views

CVE-2024-44648

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php...

0.00258EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•16 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the product parameter of search-result.php. An attacker can exploit this vulnerability to execute...

6.5CVSS8.2AI score0.00258EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•18 views

PT-2025-47202

Name of the Vulnerable Software and Affected Versions PHPGurukul Online Shopping Portal version 2.0 Description The PHPGurukul Online Shopping Portal 2.0 is susceptible to SQL Injection due to improper handling of the email parameter in the forgot-password.php script. Successful exploitation allo...

9.8CVSS6.5AI score0.00438EPSS
SaveExploits1References10
CVE
CVE
•added 2025/11/17 12:00 a.m.•44 views

CVE-2024-44664

The PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of proper validation for externally entered SQL statements. The vulnerability exists in the product-details.php file and specifically affects the name , summary , review , quality , price , and value parameters...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•34 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. Online Shopping Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the name, summary, review, quality, price, and value parameters in product-details.php. An attacker c...

6.5CVSS8.2AI score0.00258EPSS
SaveExploits1References3
CVE
CVE
•added 2025/11/17 12:00 a.m.•36 views

CVE-2024-44660

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of validation for externally-entered SQL statements. The vulnerability specifically affects the fullname, emailid, and contactno parameters within the login.php file. An attacker can exploit this flaw to execute il...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•19 views

PT-2025-47107

A flaw has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /manufacturer/edit unit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

6.5CVSS6.8AI score0.00336EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•33 views

PT-2025-47103

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument roll number can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

6.5CVSS7.2AI score0.00381EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•16 views

SourceCodester Online Magazine Management System SQL注入漏洞

SourceCodester Online Magazine Management System is a SourceCodester open source online magazine management system. A SQL injection vulnerability exists in SourceCodester Online Magazine Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file...

8.8CVSS7AI score0.00381EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•20 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter rollnumber in the file...

8.8CVSS7AI score0.00381EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•17 views

itsourcecode Web-Based Internet Laboratory SQL注入漏洞

Web-Based Internet Laboratory Management System is a web laboratory software. The Web-Based Internet Laboratory Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the file /course/controller.php. An attacker...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•17 views

PT-2025-47106

A SQL Injection vulnerability on an endpoint in BEIMS Contractor Web, a legacy product that is no longer maintained or patched by the vendor, allows an unauthorised user to retrieve sensitive database contents via unsanitized parameter input. This vulnerability occurs due to improper input...

9.4CVSS8.2AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•19 views

Code-Projects Courier Management System SQL注入漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Consignment in the file /search-edit.php. An attacker can exploit this...

9.8CVSS7.1AI score0.00398EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•19 views

PT-2025-47211

Name of the Vulnerable Software and Affected Versions Courier Management System version 1.0 Description A SQL injection issue exists in the file /search-edit.php due to manipulation of the Consignment argument. This manipulation can be initiated remotely. The exploit has been publicly disclosed...

6.5CVSS7.2AI score0.00398EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•20 views

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the file...

8.8CVSS6.7AI score0.00335EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•25 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of an externally entered SQL statement in the username parameter of the admin page. An attacker can exploit this vulnerability to execute illegal SQL comman...

6.5CVSS8.2AI score0.00258EPSS
SaveExploits1References3
Rows per page
Query Builder