Lucene search
+L

10440 matches found

CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin Ni CRM has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

8.5CVSS8.3AI score0.00504EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•12 views

WordPress plugin TAX SERVICE has an electronic HDM SQL injection vulnerability.

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability...

10CVSS8.3AI score0.00658EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/12/12 3:15 p.m.•20 views

CVE-2024-54842

A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter...

9.8CVSS5.7AI score0.0051EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/12/12 1:40 a.m.•9 views

CVE-2024-12487

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

8.8CVSS6.3AI score0.00574EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/12/12 1:40 a.m.•15 views

CVE-2024-12488

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

8.8CVSS6.3AI score0.00574EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/12/12 1:40 a.m.•17 views

CVE-2024-12479

A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2 and classified as critical. This issue affects the function searchTopicByKeyword of the file wetech-cms-master\wetech-core\src\main\java\tech\wetech\cms\dao\TopicDao.java. The manipulation of the argument keyword leads to sql injection. The...

8.8CVSS6.4AI score0.00602EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•19 views

Wetech-CMS injection vulnerability

wetech-cms is a content management system by Cheng Jinbao, an individual developer. An injection vulnerability exists in wetech-cms version 1.0 to 1.2, which is prone to SQL injection attacks...

8.8CVSS6.6AI score0.00602EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•22 views

Code-Projects Online Class and Exam Scheduling System Injection Vulnerabilities

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. An injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from a parameter id in the file /pages/department.php th...

8.8CVSS6.6AI score0.00574EPSS
SaveExploits1References5
NCSC
NCSC
•added 2024/12/11 8:58 a.m.•14 views

Vulnerabilities fixed in Ivanti Cloud Security Appliance

Ivanti has fixed vulnerabilities in the Cloud Security Appliance CSA for versions prior to 5.0.3. The vulnerabilities are located in the admin web console of the Ivanti Cloud Security Appliance. The first vulnerability involves an authentication bypass, allowing remote unauthenticated attackers t...

10CVSS9.3AI score0.23309EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•18 views

PT-2024-17624 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue has been found in the code-projects Online Class and Exam Scheduling System. This issue affects unknown code in the file /pages/teacher save.php...

9.8CVSS6.2AI score0.00761EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•21 views

PT-2024-17621 · Unknown · Code-Projects Online Class/Exam Scheduling System

Name of the Vulnerable Software and Affected Versions: code-projects Online Class and Exam Scheduling System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /pages/subject update.php. The manipulation of the id argument leads to...

8.8CVSS6.4AI score0.00574EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2024/12/11 12:00 a.m.•17 views

PT-2024-17617 · Unknown · Codezips Technical Discussion Forum

Name of the Vulnerable Software and Affected Versions: Codezips Technical Discussion Forum version 1.0 Description: A critical vulnerability was found in the unknown code of the file /signuppost.php. The manipulation of the Username argument leads to a SQL injection. The attack can be initiated...

9.8CVSS7AI score0.00999EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2024/12/10 8:15 p.m.•23 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/12/09 7:15 p.m.•22 views

CVE-2024-54927

Kashipara E-learning Management System v1.0 is vulnerable to SQL Injection in /admin/deleteusers.php...

7.2CVSS5.8AI score0.00488EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/12/09 7:15 p.m.•27 views

CVE-2024-54923

A SQL Injection vulnerability was found in /admin/editteacher.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the department parameter...

9.8CVSS6.5AI score0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•19 views

Kashipara E-learning Management System Security Vulnerabilities

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access the database by executing arbitrary SQL commands via the title and content...

9.8CVSS6AI score0.006EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•18 views

Kashipara E-learning Management System Security Vulnerabilities

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0, which originates from an SQL injection vulnerability in /admin/deleteclass.php...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•21 views

Eryaz NatraCar B2B Dealer Management Program has a security vulnerability

Eryaz NatraCar B2B Dealer Management Program is a dealer management system from Eryaz. A security vulnerability exists in Eryaz NatraCar B2B Dealer Management Program that stems from improper use of special elements in SQL commands, resulting in a SQL injection vulnerability...

9.8CVSS5.8AI score0.0045EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•20 views

Flipkart-Clone-PHP security vulnerability

Flipkart-Clone-PHP is an application by Jigar Sable Personal Developer. A security vulnerability exists in Flipkart-Clone-PHP version 1.0, which stems from the producttitle parameter in the entry.php page containing a SQL injection vulnerability...

9.8CVSS5.8AI score0.00644EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•24 views

PT-2024-36450 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-Learning Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability in the /admin/delete department.php endpoint. This vulnerability can be exploited to inject malicious SQL code. Recommendations:...

9.8CVSS5.9AI score0.0051EPSS
SaveExploits1References5
Rows per page
Query Builder