Lucene search
+L

10206 matches found

Positive Technologies
Positive Technologies
added 2023/12/31 12:00 a.m.10 views

PT-2023-32933 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS versions up to 2.0 build20220529-20231006 Description: A critical vulnerability was found in S-CMS, affecting an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the lid argument leads to SQL...

8.8CVSS6.3AI score0.00479EPSS
SaveExploits0References10
OSV
OSV
added 2023/12/30 5:15 p.m.8 views

CVE-2023-7179

A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function of the file /admin/categoryrow.php of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to...

8.8CVSS5.8AI score0.00733EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/30 4:15 p.m.10 views

CVE-2023-7177

A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/bookadd.php of the component HTTP POST Request Handler. The manipulation of the argument category leads to sql injection. The attack can be...

8.8CVSS5.8AI score0.00733EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/30 12:00 a.m.10 views

Online College Library System SQL Injection Vulnerability

Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/returnadd.php page...

8.8CVSS7.9AI score0.00683EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/12/30 12:00 a.m.13 views

PT-2023-32922 · Unknown · Campcodes Online College Library System

Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online College Library System. This issue affects an unknown part of the file /admin/return add.php of the component HTT...

8.8CVSS5.9AI score0.00683EPSS
SaveExploits1References8
OSV
OSV
added 2023/12/29 9:15 p.m.10 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS5.9AI score0.00629EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/12/29 9:15 p.m.3 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS7.5AI score0.00629EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/29 12:15 a.m.12 views

CVE-2023-7142

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

9.8CVSS5AI score0.00644EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/29 12:00 a.m.10 views

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 through 774, which stems from the presence of a SQL...

8.8CVSS7.8AI score0.0073EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2023/12/29 12:00 a.m.11 views

PT-2023-31458 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: The issue is related to SQL Injection on the Users login panel. This occurs because the password parameter is directly used in the SQL query without any sanitization, allowing the SQL Injection...

9.8CVSS9.5AI score0.00629EPSS
SaveExploits1References9
OSV
OSV
added 2023/12/28 11:15 p.m.9 views

CVE-2023-7139

A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...

9.8CVSS5.2AI score0.00644EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/28 7:15 p.m.14 views

CVE-2023-50846

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login.This issue affects RegistrationMagic – Custom Registration Forms, User Registration,...

7.2CVSS7.3AI score0.00529EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/28 4:16 p.m.6 views

CVE-2023-7129

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

8.8CVSS5.5AI score0.00634EPSS
SaveExploits1References3
OSV
OSV
added 2023/12/28 12:15 p.m.9 views

CVE-2023-50852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3...

7.2CVSS5.8AI score0.0053EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/28 12:00 a.m.8 views

Voting System SQL Injection Vulnerability

Online Voting System is an online voting system by the individual developer Carlo Montero. The Voting System is vulnerable to a SQL injection vulnerability. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's announcement...

8.8CVSS7.7AI score0.00701EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/12/28 12:00 a.m.11 views

Lychee SQL Injection Vulnerability

Lychee is a beautiful and easy to use photo management system from The Lychee Organisation open source. Used to manage and share photos . Lychee versions prior to 5.0.2 SQL injection vulnerability , the vulnerability stems from the component mysql/mariadb SQL injection vulnerability...

9.8CVSS7.9AI score0.00472EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/28 12:00 a.m.11 views

PT-2023-32889 · Code Projects · Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical issue has been found in the Voting System, affecting the /admin/ file of the Admin Login component. The manipulation of the username argument leads to sql injection. The exploit...

8.8CVSS6.9AI score0.00701EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/12/28 12:00 a.m.7 views

WordPress Plugin GeoDirectory SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.6CVSS7.7AI score0.00545EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/28 12:00 a.m.9 views

WordPress Plugin NEX-Forms SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS7.7AI score0.00574EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/26 12:00 a.m.13 views

PT-2023-32879 · Unknown · Code-Projects Library Management System

Name of the Vulnerable Software and Affected Versions: code-projects Library Management System version 2.0 Description: A critical issue was found in the code-projects Library Management System, affecting the file /admin/login.php. The manipulation of the username argument leads to SQL injection...

9.8CVSS7.8AI score0.00974EPSS
SaveExploits1References6
Rows per page
Query Builder