Lucene search
+L

10211 matches found

CNNVD
CNNVD
added 2024/07/31 12:00 a.m.10 views

Online Blood Bank Management System SQL注入漏洞

Online Blood Bank Management System is itsourcecode open source online blood bank management system. Online Blood Bank Management System version 1.0 exists SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter user can lead to sql injection...

9.8CVSS8AI score0.00742EPSS
SaveExploits1References5
CNVD
CNVD
added 2024/07/31 12:00 a.m.10 views

Simopro Technology WinMatrix3 SQL Injection Vulnerability (CNVD-2025-20312)

Simopro Technology WinMatrix3 is an IT resource management system for enterprise-class computer asset management, endpoint security control and IT operations management. Simopro Technology WinMatrix3 suffers from a SQL injection vulnerability that stems from a lack of proper validation of user...

9.8CVSS8.1AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/30 11:15 p.m.9 views

CVE-2024-7276

A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/membersave.php. The manipulation of the argument last/first leads to sql injection. The attack can be launched...

7.2CVSS5.7AI score0.00596EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/30 8:15 a.m.6 views

CVE-2024-7224

A vulnerability was found in SourceCodester Lot Reservation Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /lotdetails.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.7AI score0.00511EPSS
SaveExploits1References4
OSV
OSV
added 2024/07/30 7:15 a.m.10 views

CVE-2024-7222

A vulnerability, which was classified as critical, was found in SourceCodester Lot Reservation Management System 1.0. Affected is an unknown function of the file /home.php. The manipulation of the argument type leads to sql injection. It is possible to launch the attack remotely. The exploit has...

9.8CVSS6.5AI score0.00595EPSS
SaveExploits1References4
Patchstack
Patchstack
added 2024/07/30 6:40 a.m.11 views

WordPress CZ Loan Management plugin <= 1.1 - Unauthenticated SQLi vulnerability

Unauthenticated SQLi vulnerability discovered by Project Black in WordPress Plugin CZ Loan Management versions = 1.1...

9.1CVSS7AI score0.01958EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.9 views

WordPress plugin WpStickyBar SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

9.8CVSS7.1AI score0.27232EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.11 views

Xibo CMS SQL注入漏洞

Xibo CMS is an open source content management system from Xibo Digital Signage. Xibo CMS suffers from a SQL injection vulnerability that originates from allowing authenticated users to obtain and modify arbitrary data from the database by injecting specially crafted values into the API...

8.1CVSS7.7AI score0.00457EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.9 views

PT-2024-38183 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /view model.php. The manipulation of the id argument leads to SQL injectio...

9.8CVSS8.1AI score0.0052EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.11 views

PT-2024-38184 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /lot details.php. The manipulation of the id argument leads to SQL injection...

9.8CVSS8.1AI score0.00511EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/07/30 12:00 a.m.13 views

itsourcecode Alton Management System SQL注入漏洞

itsourcecode Alton Management System is an online restaurant management system from itsourcecode. A SQL injection vulnerability exists in version 1.0 of itsourcecode Alton Management System, which stems from an SQL injection vulnerability in the rcode function of the /reservationstatus.php page...

7.2CVSS5.8AI score0.00646EPSS
SaveExploits1References2
OSV
OSV
added 2024/07/29 4:15 a.m.8 views

CVE-2024-7202

The query functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/29 3:15 a.m.9 views

CVE-2024-7201

The login functionality of WinMatrix3 Web package from Simopro Technology lacks proper validation of user input, allowing unauthenticated remote attackers to inject SQL commands to read, modify, and delete database contents...

9.8CVSS5.9AI score0.00685EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.9 views

Lost and Found Information System 安全漏洞

Lost and Found Information System is a lost and found information system by oretnom23 individual developer. A security vulnerability exists in Lost and Found Information System version 1.0, which originates from a SQL injection vulnerability that allows remote attackers to elevate privileges via...

8.8CVSS7.7AI score0.0081EPSS
SaveExploits2References4
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.8 views

Complaints Report Management System SQL注入漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Complaints Report Management System version 1.0, which is caused by a SQL injection vulnerability in the id parameter of the...

8.8CVSS7AI score0.00532EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.9 views

Complaints Report Management System 安全漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of the Complaints Report Management System, which stems from an SQL injection vulnerability in the username parameter of the...

9.8CVSS7.9AI score0.00581EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/28 6:15 p.m.9 views

CVE-2024-7165

A vulnerability was found in SourceCodester School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /viewpayment.php. The manipulation of the argument efid leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS6.4AI score0.00532EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/28 12:00 a.m.7 views

SourceCodester School Fees Payment System SQL注入漏洞

SourceCodester School Fees Payment System is a school fees payment system. A SQL injection vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System, which stems from an SQL injection vulnerability in the id parameter of the /manageuser.php file...

8.8CVSS7AI score0.00532EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/26 12:00 a.m.12 views

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus version 5717 and prior versions. An attacker can exploit this vulnerability to perform SQL injection attacks...

8.8CVSS7.8AI score0.03052EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/07/26 12:00 a.m.11 views

PT-2024-38087 · Unknown · Md-Mafujul-Hasan Online-Payroll-Management-System

Name of the Vulnerable Software and Affected Versions: MD-MAFUJUL-HASAN Online-Payroll-Management-System affected versions not specified Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /shift viewmore.php. The manipulation of the id...

8.8CVSS7.7AI score0.00588EPSS
SaveExploits1References7
Rows per page
Query Builder