Lucene search
+L

10214 matches found

CNNVD
CNNVD
added 2024/05/23 12:00 a.m.7 views

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in the Complete Web-Based School Management System version 1.0, which stems from an incorrect operation of the parameter date that can lead to sq...

6.5CVSS7.3AI score0.00391EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/23 12:00 a.m.6 views

PT-2024-26253 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the month parameter in the "/model/all events1.php" API endpoint. Recommendations: F...

5.3CVSS8.6AI score0.00221EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/23 12:00 a.m.18 views

PT-2024-26254 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue in the /model/update subject.php file allows an attacker to execute arbitrary SQL commands via the name parameter. This could potentially lea...

9.8CVSS8.2AI score0.0051EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/05/23 12:00 a.m.14 views

PT-2024-26362 · Meshery · Meshery

Name of the Vulnerable Software and Affected Versions: Meshery versions prior to 0.7.22 Description: A SQL injection issue may lead to arbitrary file write by using a SQL injection stacked queries payload and the ATTACH DATABASE command. Attackers may be able to access and modify any data stored ...

6CVSS7.6AI score0.01596EPSS
SaveExploits1References14
CNNVD
CNNVD
added 2024/05/22 12:00 a.m.10 views

Zoho ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by Zoho USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7271, which stems from a SQL injection issue in the Lock History option...

7.2CVSS7.8AI score0.02152EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/22 12:00 a.m.10 views

PT-2024-35191 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /view/teacher salary invoice.php. The manipulation of the teacher id...

6.5CVSS7.2AI score0.00407EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/05/21 12:00 a.m.8 views

ZkTeco ProFace X、Smartec ST-FR043、Smartec ST-FR041ME、ZAM170-NF-1.8.25-7354-Ver1.0.0 SQL注入漏洞

ZkTeco OEM is an intelligent system from ZkTeco China. A SQL injection vulnerability exists in ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME, and ZAM170-NF-1.8.25-7354-Ver1.0.0 versions, which stems from the lack of certain protection mechanisms and allows an attacker to execute arbitrar...

10CVSS8.6AI score0.00949EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/21 12:00 a.m.11 views

PT-2024-12808 · Zkteco · Zkteco-Based Oem Devices

Name of the Vulnerable Software and Affected Versions: ZKTeco-based OEM devices versions ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly other Standalone service versions 2.1.6-20200907 and possibly others Description: An SQL Injection vulnerability exists in ZKTeco-based OEM devices due to improper...

7.5CVSS8.6AI score0.00581EPSS
SaveExploits0References9
OSV
OSV
added 2024/05/20 2:15 a.m.14 views

CVE-2024-5112

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view/studentprofile.php. The manipulation of the argument stdindex leads to sql injection. The attack can be initiated...

6.5CVSS5.8AI score0.00488EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/20 12:15 a.m.10 views

CVE-2024-5107

A vulnerability, which was classified as critical, has been found in Campcodes Complete Web-Based School Management System 1.0. This issue affects some unknown processing of the file /view/studentpaymentdetails2.php. The manipulation of the argument index leads to sql injection. The attack may be...

6.5CVSS6.4AI score0.00407EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/05/20 12:00 a.m.24 views

PT-2024-34536 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /view/teacher attendance history1.php. The manipulation of the index...

6.5CVSS7.2AI score0.00458EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/05/20 12:00 a.m.9 views

PT-2024-34523 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /view/student payment invoice.php. The manipulation of the index argumen...

6.5CVSS7.1AI score0.00407EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/05/20 12:00 a.m.9 views

Zoho ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by Zoho USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in Zoho ManageEngine ADAudit Plus prior to version 7271, which stems from a vulnerability that allows SQL injection when fetching aggregated...

8.8CVSS7.7AI score0.02288EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/05/20 12:00 a.m.7 views

PT-2024-34543 · Sourcecodester · Sourcecodester Online Examination System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Examination System version 1.0 Description: A critical issue has been found in the SourceCodester Online Examination System, affecting some unknown functionality of the file save.php. The manipulation of the vote argumen...

9.8CVSS8.1AI score0.00807EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/05/19 12:00 a.m.22 views

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a parameter grade in the file...

8.8CVSS6.9AI score0.0051EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/19 12:00 a.m.7 views

PT-2024-34513 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the processing of the file /view/student payment details2.php, where the manipulation of the index argument leads to SQL...

6.5CVSS7.1AI score0.00407EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/05/18 12:00 a.m.11 views

PT-2024-34460 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Best House Rental Management System, affecting the file login.php. The manipulation of the username and...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References11
OSV
OSV
added 2024/05/17 8:15 p.m.9 views

CVE-2024-5066

A vulnerability classified as critical was found in PHPGurukul Online Course Registration System 3.1. Affected by this vulnerability is an unknown functionality of the file /pincode-verification.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched...

8.8CVSS6.4AI score0.00575EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/17 12:00 a.m.12 views

Online Course Registration SQL注入漏洞

PHPGurukul Online Course Registration is a PHP and MySQL based online course registration system from PHPGurukul, Inc. A SQL injection vulnerability exists in PHPGurukul Online Course Registration System version 3.1, which originates from the parameter regno in the file /onlinecourse/ that can le...

9.8CVSS7.8AI score0.00697EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/05/17 12:00 a.m.10 views

Gas Agency Management System SQL注入漏洞

Gas Agency Management System is a gas agency management software by Mayuri K. Individual developer. It is used to manage the daily operations of a gas agency. A SQL injection vulnerability exists in Gas Agency Management System version 1.0, which stems from a parameter id in the file edituser.php...

8.8CVSS7AI score0.00646EPSS
SaveExploits1References5
Rows per page
Query Builder