Lucene search
+L

10206 matches found

CNNVD
CNNVD
added 2023/12/21 12:00 a.m.8 views

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "n" parameter of update.php not validating received characters and sending them to the...

8.8CVSS7.9AI score0.00673EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.9 views

PT-2023-31298 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The JobId parameter of the "Employer/DeleteJob.php" resource does not validate the characters received, and they are sent unfiltere...

9.8CVSS9.7AI score0.00671EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.8 views

PT-2023-30895 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...

8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.9 views

PT-2023-31287 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the txtTitle parameter of the "Employer/InsertJob.php" resource does not validate the characters received, and they are sent...

7.5AI score
SaveExploits0References4
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.8 views

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Online Examination System v1.0, which stems from the "desc" parameter of update.php that does not validate incoming characters and sends them to...

8.8CVSS8AI score0.00673EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.12 views

S-CMS Security Vulnerabilities

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A security vulnerability exists in S-CMS v5.0, which originates from the discovery of an SQL injection vulnerability via the Anewsauth parameter in /admin/ajax.php...

9.8CVSS8AI score0.00534EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/12/21 12:00 a.m.9 views

Projectworlds Online Examination System SQL Injection Vulnerability

Projectworlds Online Examination System is an online examination system from Projectworlds India. Projectworlds Online Examination System v1.0 suffers from a SQL injection vulnerability, which stems from the "ch" parameter of update.php not validating received characters and sending them to the...

8.8CVSS7.9AI score0.00673EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/12/21 12:00 a.m.11 views

PT-2023-31286 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the txtDesc parameter of the "Employer/InsertJob.php" resource does not validate the characters received, and they are sent...

7.4AI score
SaveExploits0References4
OSV
OSV
added 2023/12/20 9:15 p.m.6 views

CVE-2023-48433

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the loginaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/20 7:15 p.m.10 views

CVE-2023-47990

SQL Injection vulnerability in components/tablemanager/html/editadmintable.php in CuppaCMS V1.0 allows attackers to run arbitrary SQL commands via the table parameter...

9.8CVSS6AI score0.0078EPSS
SaveExploits1References1
OSV
OSV
added 2023/12/20 5:15 p.m.7 views

CVE-2023-30495

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Themefic Ultimate Addons for Contact Form 7.This issue affects Ultimate Addons for Contact Form 7: from n/a through 3.1.23...

8.1CVSS7.3AI score0.00625EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/20 4:15 p.m.9 views

CVE-2023-33209

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CrawlSpider SEO Change Monitor – Track Website Changes.This issue affects SEO Change Monitor – Track Website Changes: from n/a through 1.2...

8.1CVSS7.3AI score0.00638EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.9 views

PT-2023-31476

Name of the Vulnerable Software and Affected Versions Student Information System version 1.0 Description The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the coursename parameter of the "marks.php" resource does not validate the characters received and they a...

8.8CVSS9.9AI score0.00673EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.14 views

PT-2023-30379 · Avirtum · Avirtum Ipages Flipbook For Wordpress

Name of the Vulnerable Software and Affected Versions: Avirtum iPages Flipbook For WordPress versions 1.4.8 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential...

7.6CVSS5.4AI score0.0054EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.9 views

WordPress Plugin MainWP Dashboard SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exist...

7.6CVSS7.7AI score0.00551EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.6 views

PT-2023-31079 · Unknown · Bravo Translate

Name of the Vulnerable Software and Affected Versions: Bravo Translate versions 1.2 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

9.1CVSS9.2AI score0.00605EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2023/12/20 12:00 a.m.14 views

WordPress Plugin Bravo Translate SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

9.1CVSS7.7AI score0.00605EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.18 views

PT-2023-31471

Name of the Vulnerable Software and Affected Versions Student Information System version 1.0 Description The issue concerns multiple Authenticated SQL Injection vulnerabilities. Specifically, the coursecode parameter of the "marks.php" resource does not validate the characters received and they a...

8.8CVSS9.8AI score0.00673EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.10 views

PT-2023-31328 · Adifier · Adifier

Name of the Vulnerable Software and Affected Versions: Adifier - Classified Ads WordPress Theme versions prior to 3.1.4 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential...

9.8CVSS9.7AI score0.00588EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.19 views

PT-2023-32838 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA 2017 versions up to 11.9 Description: A critical issue has been found in the software, affecting an unknown function of the file general/vehicle/checkup/delete search.php. The manipulation of the VU ID argument leads to sql injectio...

9.8CVSS6.7AI score0.00695EPSS
SaveExploits1References6
Rows per page
Query Builder