Lucene search
+L

10442 matches found

osv_cve
osv_cve
•added 2024/01/15 12:15 a.m.•28 views

CVE-2024-0526

A vulnerability classified as critical was found in CXBSoft Url-shorting up to 1.3.1. This vulnerability affects unknown code of the file /pages/shorttolong.php of the component HTTP POST Request Handler. The manipulation of the argument shorturl leads to sql injection. The exploit has been...

9.8CVSS6.2AI score0.00607EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•23 views

PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

7.5CVSS6.2AI score0.00498EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•27 views

PT-2024-15636 · Cmseasy · Cmseasy

Name of the Vulnerable Software and Affected Versions: CmsEasy versions up to 7.7.7 Description: A critical issue was found in the function getslide child action in the library lib/admin/language admin.php. The manipulation of the argument sid leads to sql injection. The attack can be launched...

9.8CVSS6.6AI score0.00709EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•22 views

PT-2024-15641 · Cxbsoft · Cxbsoft Post-Office

Name of the Vulnerable Software and Affected Versions: CXBSoft Post-Office version 1.0 Description: A critical issue was found in the HTTP POST Request Handler component, specifically in the /admin/pages/update go.php file. The manipulation of the version argument leads to sql injection. The issu...

9.8CVSS6.3AI score0.00607EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2024/01/14 12:00 a.m.•23 views

PT-2024-15637 · Unknown · Cxbsoft Url-Shorting

Name of the Vulnerable Software and Affected Versions: CXBSoft Url-shorting versions up to 1.3.1 Description: A critical issue affects some unknown functionality of the file index.php. The manipulation of the url argument leads to sql injection. The exploit has been disclosed to the public. The...

9.8CVSS6.2AI score0.00607EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2024/01/14 12:00 a.m.•20 views

CXBSoft Url-shorting SQL Injection Vulnerability

CXBSoft Url-shorting is CXBSoft open source a can shorten the URL to get the library . CXBSoft Url-shorting 1.3.1 version of the previous SQL injection vulnerability , the vulnerability stems from /pages/longsshort.php file longurl parameter SQL injection vulnerability...

9.8CVSS6.6AI score0.00607EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/14 12:00 a.m.•27 views

CXBSoft Url-shorting SQL Injection Vulnerability

CXBSoft Url-shorting is CXBSoft open source a can shorten the URL to get the library . CXBSoft Url-shorting 1.3.1 version of the previous SQL injection vulnerability , the vulnerability stems from /pages/shorttolong.php file longurl parameter SQL injection vulnerability...

9.8CVSS6.6AI score0.00607EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/01/13 4:15 p.m.•32 views

CVE-2024-0494

A vulnerability, which was classified as critical, was found in Kashipara Billing Software 1.0. This affects an unknown part of the file materialbill.php of the component HTTP POST Request Handler. The manipulation of the argument itemtypeid leads to sql injection. It is possible to initiate the...

9.8CVSS6.7AI score0.00535EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/01/13 11:15 a.m.•34 views

CVE-2024-0485

A vulnerability, which was classified as critical, was found in code-projects Fighting Cock Information System 1.0. Affected is an unknown function of the file admin/pages/tables/addcon.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely...

9.8CVSS6.8AI score0.00517EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/01/13 8:15 a.m.•40 views

CVE-2024-0480

A vulnerability was found in Taokeyun up to 1.0.5. It has been declared as critical. Affected by this vulnerability is the function index of the file application/index/controller/m/Drs.php of the component HTTP POST Request Handler. The manipulation of the argument cid leads to sql injection. The...

9.8CVSS7.2AI score0.00792EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2024/01/13 12:00 a.m.•23 views

Fighting Cock Information System security breach

Fighting Cock Information System is a chicken information system by chrisjelo individual developer. The code-projects Fighting Cock Information System version 1.0 has a security vulnerability that stems from an SQL injection vulnerability in the /admin/action/editchicken.php file...

9.8CVSS6.8AI score0.005EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/01/13 12:00 a.m.•22 views

Online Lawyer Management System SQL Injection Vulnerability

Online Lawyer Management System is an online lawyer management system. A security vulnerability exists in version 1.0 of the Online Lawyer Management System, which stems from a parameter experience in the file searchLawyer.php that can lead to SQL injection...

9.8CVSS7AI score0.005EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/01/13 12:00 a.m.•20 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software version 1.0, which stems from a SQL injection vulnerability in the partyname of the partysubmit.php file...

9.8CVSS7AI score0.00575EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/01/13 12:00 a.m.•20 views

SourceCodester House Rental Management System SQL Injection Vulnerability

House Rental Management System is a house rental management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in version 1.0 of the SourceCodester House Rental Management System, which stems from a vulnerability in the manageuser.php file...

7.2CVSS6AI score0.00622EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/13 12:00 a.m.•30 views

PT-2024-15596 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found, affecting the function login of the file application/index/controller/m/User.php in the HTTP POST Request Handler component. The manipulation of the username argument...

9.8CVSS7AI score0.00561EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/01/13 12:00 a.m.•20 views

PT-2024-15614 · Unknown · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Student Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /classes/Users.php?f=save. The manipulation of the username argument leads to sql injection...

9.8CVSS6.7AI score0.005EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/01/13 12:00 a.m.•17 views

PT-2024-15600 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the function index of the file application/index/controller/app/Task.php. The manipulation of the cid...

9.8CVSS6.6AI score0.005EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2024/01/12 4:15 p.m.•21 views

CVE-2023-51978

In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection...

6.5CVSS6.6AI score0.00541EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•17 views

PT-2024-15576 · Unknown · Blood Bank & Donor Management

Name of the Vulnerable Software and Affected Versions: Blood Bank & Donor Management version 5.6 Description: A critical issue has been found in the software, affecting unknown code of the file /admin/request-received-bydonar.php. This leads to sql injection. The attack can be initiated remotely...

7.2CVSS5.5AI score0.00668EPSS
SaveExploits1References8
CNNVD
CNNVD
•added 2024/01/12 12:00 a.m.•17 views

Blood Bank & Donor Management SQL Injection Vulnerability

Blood Bank & Donor Management is a blood bank and donor management system. Blood Bank & Donor Management version 5.6 suffers from a SQL injection vulnerability that originates from a flaw in the /admin/request-received-bydonar.php file...

7.2CVSS7.9AI score0.00668EPSS
SaveExploits1References4
Rows per page
Query Builder