Lucene search
+L

10214 matches found

CNNVD
CNNVD
added 2024/02/29 12:00 a.m.15 views

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...

7.2CVSS8.4AI score0.00714EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/02/29 12:00 a.m.8 views

PT-2024-18470 · WordPress · Wpvivid

Name of the Vulnerable Software and Affected Versions: Migration, Backup, Staging – WPvivid plugin for WordPress versions up to, and including, 0.9.68 Description: The issue is related to a missing capability check on the get restore progress and restore functions, allowing unauthorized access...

9.1CVSS9.7AI score0.00832EPSS
SaveExploits1References8
OSV
OSV
added 2024/02/28 10:15 p.m.12 views

CVE-2024-25867

A SQL Injection vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary SQL commands via the membershipType and membershipAmount parameters in the addtype.php component...

9.1CVSS6.1AI score0.00674EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.10 views

WordPress Plugin WP eCommerce Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.8CVSS7.8AI score0.00724EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.8 views

PHPGURUKUL Zoo Management System 安全漏洞

Zoo Management System is a zoo management system. Zoo Management System has a SQL injection vulnerability that originates from a SQL injection vulnerability in the editid parameter of the /zms/admin/changeimage.php file, no details of the vulnerability are available at this time...

3.8CVSS8AI score0.0039EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.16 views

PT-2024-14295 · Unknown · Simple Student Attendance System

Name of the Vulnerable Software and Affected Versions: Simple Student Attendance System version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the "student form.php" and "class form.php" pages. This enables the attacker t...

9.8CVSS8.4AI score0.01182EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2024/02/28 12:00 a.m.8 views

PHPGurukul Zoo Management System Security Vulnerability

PHPGurukul PHPGURUKUL Zoo Management System is a zoo management system from the US company PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul Zoo Management System, which originates from an SQL injection vulnerability...

9.8CVSS7.8AI score0.00628EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.11 views

PT-2024-21172 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A SQL Injection issue allows a remote attacker to execute arbitrary SQL commands via the email parameter in the "index.php" component. This enables the attacker to manipulate...

8.8CVSS8.9AI score0.00786EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/02/28 12:00 a.m.12 views

PT-2024-20896 · Unknown · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability in the /zms/admin/edit-ticket.php file. This vulnerability can be exploited via the tickettype and tprice parameters...

9.8CVSS7.5AI score0.00628EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/02/27 12:00 a.m.27 views

PT-2024-18430 · Sourcecodester · Sourcecodester Web-Based Student Clearance System

Name of the Vulnerable Software and Affected Versions: SourceCodester Web-Based Student Clearance System version 1.0 Description: A critical issue has been found in the Edit User Profile Page of the SourceCodester Web-Based Student Clearance System, specifically in the file /admin/edit-admin.php...

7.2CVSS5.8AI score0.00714EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.10 views

CodeAstro Membership Management System SQL Injection Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from an unknown section in getmembershipmount.php, and can be exploited to perform SQL injection vi...

6.5CVSS8AI score0.00475EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/27 12:00 a.m.11 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop baimporter versions prior to 1.1.28, which stems from a SQL...

9.8CVSS7.9AI score0.00574EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/26 12:00 a.m.15 views

PT-2024-20267 · Code Projects · Code-Projects Computer Book Store

Name of the Vulnerable Software and Affected Versions: Code-projects Computer Book Store version 1.0 Description: The issue is related to SQL Injection via BookSBIN. Recommendations: For Code-projects Computer Book Store version 1.0, consider restricting access to the BookSBIN component to minimi...

7.8CVSS8.4AI score0.00418EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.10 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can...

8.8CVSS8AI score0.00628EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:00 a.m.9 views

SourceCodester Employee Management System Security Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A security vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead ...

8.8CVSS7.5AI score0.00628EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/25 12:00 a.m.14 views

PT-2024-18384 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A critical issue has been found, affecting an unknown function of the file /psubmit.php. The manipulation of the argument pid with the input '+or+1%3d1%23 leads to SQL...

9.8CVSS8.1AI score0.00729EPSS
SaveExploits0References9
OSV
OSV
added 2024/02/23 5:15 p.m.11 views

CVE-2024-1826

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file Source/librarian/user/student/login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...

9.8CVSS5.8AI score0.00579EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/23 12:15 p.m.8 views

CVE-2024-25928

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Sitepact.This issue affects Sitepact: from n/a through 1.0.5...

9.8CVSS7.3AI score0.00377EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.12 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is SourceCodester open source php-based system for employee performance management . SourceCodester Employee Management System version 1.0 there is an injection vulnerability , the vulnerability stems from /Account/login.php in the existence of some unkno...

9.8CVSS7.9AI score0.00908EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/02/23 12:00 a.m.11 views

PT-2024-18344 · Unknown · Code-Projects Library System

Name of the Vulnerable Software and Affected Versions: code-projects Library System version 1.0 Description: A critical issue was found in the code-projects Library System, affecting an unknown functionality of the file Source/librarian/user/student/registration.php. The manipulation of the email...

9.8CVSS7.8AI score0.0076EPSS
SaveExploits1References10
Rows per page
Query Builder