Lucene search
+L

1508 matches found

ATTACKERKB
ATTACKERKB
added 2022/01/24 4:15 p.m.7 views

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

9.6CVSS7.6AI score0.02181EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/24 4:15 p.m.4 views

CVE-2021-41471

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS6.1AI score0.01228EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.4 views

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System, which originated in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, and can be...

9.8CVSS8.8AI score0.01228EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/21 4:15 p.m.6 views

CVE-2021-46200

An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php...

10CVSS8.1AI score0.01556EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/21 4:15 p.m.6 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

9.8CVSS5.8AI score0.01751EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/21 4:15 p.m.14 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS8.1AI score0.01751EPSS
SaveExploits1References3
NVD
NVD
added 2022/01/21 4:15 p.m.18 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS0.01751EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/21 4:15 p.m.21 views

Sql injection

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS9.8AI score0.01751EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/21 3:20 p.m.29 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10AI score0.01751EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/21 12:0 a.m.8 views

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. It is a system that provides management functions. A SQL injection vulnerability exists in the SourceCodester Courier Management System, which stems from the email parameter in the product/cms/ajax.php page...

10CVSS8.6AI score0.01751EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/01/21 12:0 a.m.10 views

PT-2022-12606 · Unknown · Sourcecodester Simple Music Cloud Community System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Music Clour Community System version 1.0 Description: An SQL Injection issue exists via the email parameter in the "/music/ajax.php" API endpoint. This allows for potential exploitation. Recommendations: For Sourcecodest...

10CVSS9.9AI score0.01556EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2022/01/21 12:0 a.m.7 views

Sourcecodester Simple Music Clour Community System SQL注入漏洞

Sourcecodester Simple Music Clour Community System is a simple music cloud community system. sourcecodester Simple Music Clour Community System has a SQL injection vulnerability in version v1.0, which originates from the product / music/ajax.php page fails to properly filter the email parameter f...

10CVSS6AI score0.01556EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/27 11:15 a.m.3 views

CVE-2021-24980

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwollegbuseremail parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
CNVD
CNVD
added 2021/12/24 12:0 a.m.18 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

9.8CVSS4AI score0.0113EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/23 8:15 p.m.3 views

CVE-2021-43981

mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

9.8CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/22 6:15 p.m.4 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS7.3AI score0.0113EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/22 6:15 p.m.7 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2021/12/22 5:17 p.m.25 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

10AI score0.0113EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/22 12:0 a.m.9 views

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

9.8CVSS5.9AI score0.0113EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/21 12:15 p.m.8 views

CVE-2021-45255

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with that domain,...

10CVSS7.3AI score0.01537EPSS
SaveExploits1References2
Rows per page
Query Builder