Lucene search
+L

10214 matches found

CNNVD
CNNVD
added 2024/01/08 12:00 a.m.12 views

WordPress Plugin Simple Inventory Management SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in...

9.8CVSS7.7AI score0.00553EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.10 views

Kashipara Dynamic Lab Management System SQL Injection Vulnerability

Kashipara Dynamic Lab Management System is a dynamic lab management system from Kashipara. A SQL injection vulnerability exists in Kashipara Dynamic Lab Management System 1.0 and earlier versions, which originates from a SQL injection vulnerability in the file loginprocess.php...

7.5CVSS7.9AI score0.00733EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/08 12:00 a.m.10 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally-entered SQL statements in the itemtype parameter of the stockedit.php fil...

9.8CVSS8.2AI score0.00697EPSS
SaveExploits1References4
OSV
OSV
added 2024/01/07 11:15 p.m.9 views

CVE-2024-0287

A vulnerability was found in Kashipara Food Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file itemBillPdf.php. The manipulation of the argument printid leads to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS5.7AI score0.00711EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/07 11:15 a.m.4 views

CVE-2024-0273

A vulnerability was found in Kashipara Food Management System up to 1.0. It has been classified as critical. Affected is an unknown function of the file addwasteentry.php. The manipulation of the argument itemname leads to sql injection. It is possible to launch the attack remotely. The exploit h...

6.5CVSS5.7AI score0.00589EPSS
SaveExploits1References3
OSV
OSV
added 2024/01/07 8:15 a.m.13 views

CVE-2024-0270

A vulnerability, which was classified as critical, was found in Kashipara Food Management System up to 1.0. This affects an unknown part of the file itemlistsubmit.php. The manipulation of the argument itemname leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

6.5CVSS5.6AI score0.00577EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/07 12:00 a.m.14 views

PT-2024-15434 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System versions up to 1.0 Description: A critical issue has been found in the Kashipara Food Management System, affecting an unknown functionality of the file billAjax.php. The manipulation of the item name argument...

6.5CVSS8.1AI score0.00526EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/01/07 12:00 a.m.9 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which originates from a lack of validation of externally entered SQL statements in the id parameter of the addmaterialedit.php file, a...

6.5CVSS8.2AI score0.00565EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/07 12:00 a.m.21 views

PT-2024-15448 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A critical vulnerability has been found in the Kashipara Food Management System. This issue affects an unknown part of the file rawstock used damaged submit.php. The manipulation of th...

9.8CVSS8.2AI score0.00697EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/01/06 12:00 a.m.9 views

PT-2024-15428 · Unknown · Kashipara Hotel Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Hospital Management System versions up to 1.0 Description: A critical issue has been found in the Kashipara Hospital Management System, affecting some unknown functionality of the file registration.php. The manipulation of the...

9.8CVSS7.9AI score0.00935EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/01/06 12:00 a.m.9 views

DzzOffice SQL Injection Vulnerability

DzzOffice is a platform that provides online collaborative office suite functionality from the American company Big Desk DzzOffice. The platform can be used to provide features such as online documents, forms, web drives, presentations, and more. A SQL injection vulnerability exists in DzzOffice...

6.5CVSS7.5AI score0.00744EPSS
SaveExploits1References2
CNVD
CNVD
added 2024/01/05 12:00 a.m.18 views

Small CRM Users login panel SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the Users login panel. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00629EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/04 2:15 p.m.10 views

CVE-2023-49666

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'custmerdetails' parameter of the submitmateriallist.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00746EPSS
SaveExploits1References2
OSV
OSV
added 2024/01/04 2:15 p.m.9 views

CVE-2023-49633

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'buyeraddress' parameter of the buyerdetailsubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.11 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the buyeraddress parameter of the buyerdetailsubmit.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.11 views

Online Notice Board System SQL Injection Vulnerability

Online Notice Board System is an online bulletin board system. A SQL injection vulnerability exists in the v1.0 version of Online Notice Board System, which occurs when the dd parameter of the user/updateprofile.php page is processed without filtering the data and sending it to the database for...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.14 views

PT-2024-13964 · Unknown · Online Notice Board System

Name of the Vulnerable Software and Affected Versions: Online Notice Board System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the dd parameter of the "registration.php" resource does not validate the characters received, and th...

9.8CVSS10AI score0.00672EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.10 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in Kashipara Billing Software v1.0, which originates when the itemnameid parameter of the materialbill.php?action=itemRelation page is processed without filtering the data and sent to the...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/01/04 12:00 a.m.14 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...

9.8CVSS7.9AI score0.00672EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/01/04 12:00 a.m.15 views

PT-2024-13982 · Unknown · Travel Website

Name of the Vulnerable Software and Affected Versions: Travel Website version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the city parameter of the "hotelSearch.php" resource does not validate the characters received, and they are sent...

9.8CVSS9.9AI score0.00672EPSS
SaveExploits1References5
Rows per page
Query Builder