Lucene search
+L

10442 matches found

osv_cve
osv_cve
•added 2023/12/31 6:15 p.m.•21 views

CVE-2023-51423

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Saleswonder Team Webinar Plugin: Create live/evergreen/automated/instant webinars, stream & Zoom Meetings | WebinarIgnition.This issue affects Webinar Plugin: Create live/evergreen/automated/instan...

9.8CVSS8.3AI score0.00566EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/31 11:15 a.m.•23 views

CVE-2023-52180

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Really Simple Plugins Recipe Maker For Your Food Blog from Zip Recipes.This issue affects Recipe Maker For Your Food Blog from Zip Recipes: from n/a through 8.1.0...

8.1CVSS7.8AI score0.00483EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/31 12:00 a.m.•22 views

S-CMS SQL Injection Vulnerability

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A SQL injection vulnerability exists in S-CMS version 2.0build20220529-20231006 and earlier versions, which stems from a problem with an unknown function in member/reg.php...

8.8CVSS6.6AI score0.00479EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/12/31 12:00 a.m.•23 views

PT-2023-32933 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS versions up to 2.0 build20220529-20231006 Description: A critical vulnerability was found in S-CMS, affecting an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the lid argument leads to SQL...

8.8CVSS6.1AI score0.00479EPSS
SaveExploits0References10
Positive Technologies
Positive Technologies
•added 2023/12/31 12:00 a.m.•26 views

PT-2023-31925 · WordPress · Wp Adminify

Name of the Vulnerable Software and Affected Versions: WP Adminify versions 3.1.6 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation. No information is...

7.6CVSS7.4AI score0.00541EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2023/12/30 5:15 p.m.•25 views

CVE-2023-7179

A vulnerability, which was classified as critical, was found in Campcodes Online College Library System 1.0. Affected is an unknown function of the file /admin/categoryrow.php of the component HTTP POST Request Handler. The manipulation of the argument id leads to sql injection. It is possible to...

8.8CVSS5.9AI score0.00733EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/12/30 4:15 p.m.•21 views

CVE-2023-7177

A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/bookadd.php of the component HTTP POST Request Handler. The manipulation of the argument category leads to sql injection. The attack can be...

8.8CVSS6AI score0.00733EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/30 12:00 a.m.•19 views

Online College Library System SQL Injection Vulnerability

Online College Library System is an online college library system. A SQL injection vulnerability exists in Online College Library System version 1.0, which originates from a security issue in the /admin/returnadd.php page...

8.8CVSS6.2AI score0.00683EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/12/30 12:00 a.m.•22 views

PT-2023-32922 · Unknown · Campcodes Online College Library System

Name of the Vulnerable Software and Affected Versions: Campcodes Online College Library System version 1.0 Description: A critical vulnerability has been found in the Campcodes Online College Library System. This issue affects an unknown part of the file /admin/return add.php of the component HTT...

8.8CVSS5.8AI score0.00683EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2023/12/29 9:15 p.m.•9 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS8.4AI score0.00629EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/12/29 9:15 p.m.•23 views

CVE-2023-50035

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed...

9.8CVSS8.2AI score0.00629EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/12/29 12:15 a.m.•25 views

CVE-2023-7142

A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/clientview.php. The manipulation of the argument ID leads to sql injection. The exploit has been disclosed to th...

9.8CVSS5.8AI score0.00644EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/12/29 12:00 a.m.•23 views

Artica Pandora FMS Security Vulnerability

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. A security vulnerability exists in Artica Pandora FMS versions 700 through 774, which stems from the presence of a SQL...

8.8CVSS7.8AI score0.0073EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2023/12/29 12:00 a.m.•23 views

PT-2023-31458 · Unknown · Phpgurukul Small Crm

Name of the Vulnerable Software and Affected Versions: PHPGurukul Small CRM version 3.0 Description: The issue is related to SQL Injection on the Users login panel. This occurs because the password parameter is directly used in the SQL query without any sanitization, allowing the SQL Injection...

9.8CVSS8.3AI score0.00629EPSS
SaveExploits1References9
osv_cve
osv_cve
•added 2023/12/28 11:15 p.m.•24 views

CVE-2023-7139

A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/regester.php of the component HTTP POST Request Handler. The manipulation of the argument fname/lname/email/contact leads to sql...

9.8CVSS5.7AI score0.00644EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/12/28 7:15 p.m.•30 views

CVE-2023-50846

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login.This issue affects RegistrationMagic – Custom Registration Forms, User Registration,...

7.2CVSS7.5AI score0.00529EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2023/12/28 4:16 p.m.•17 views

CVE-2023-7129

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

8.8CVSS6.2AI score0.00634EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2023/12/28 12:15 p.m.•20 views

CVE-2023-50852

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in StylemixThemes Booking Calendar | Appointment Booking | BookIt.This issue affects Booking Calendar | Appointment Booking | BookIt: from n/a through 2.4.3...

7.2CVSS7.5AI score0.0053EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•22 views

PT-2023-32889 · Code Projects · Voting System

Name of the Vulnerable Software and Affected Versions: code-projects Voting System version 1.0 Description: A critical issue has been found in the Voting System, affecting the /admin/ file of the Admin Login component. The manipulation of the username argument leads to sql injection. The exploit...

8.8CVSS6.7AI score0.00701EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/12/28 12:00 a.m.•22 views

WordPress Plugin NEX-Forms SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerabili...

7.6CVSS7.5AI score0.00574EPSS
SaveExploits0References2
Rows per page
Query Builder