Lucene search
+L

1509 matches found

CNVD
CNVD
added 2024/12/30 12:0 a.m.4 views

Small CRM admin/index.php File SQL Injection Vulnerability

Small CRM is a customer relationship management system. Small CRM suffers from an SQL injection vulnerability that stems from the email parameter of the /admin/index.php file containing an SQL injection vulnerability. No details of the vulnerability are available at this time...

9.8CVSS8.1AI score0.00414EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/30 12:0 a.m.9 views

Khoj 安全漏洞

Khoj is an open source application from Khoj AI. It can create ready-to-use personal AI agents for users. A security vulnerability exists in Khoj versions prior to 1.29.10, which stems from the presence of an insecure direct object reference IDOR vulnerability that allows any authenticated user t...

4.3CVSS6.3AI score0.00381EPSS
SaveExploits0References2
OSV
OSV
added 2024/12/29 3:15 a.m.5 views

CVE-2024-13001

A vulnerability was found in PHPGurukul Small CRM 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to t...

9.8CVSS5.8AI score0.00414EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/29 12:0 a.m.5 views

PHPGurukul Small CRM 注入漏洞

Small CRM is a customer relationship management system. Small CRM suffers from an SQL injection vulnerability that stems from the email parameter of the /admin/index.php file containing an SQL injection vulnerability. No details of the vulnerability are available at this time...

9.8CVSS8AI score0.00414EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/26 12:0 a.m.6 views

Code-Projects Simple Car Rental System 安全漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter email/pass that can lead to sql injection...

9.8CVSS7.5AI score0.00649EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/21 1:15 p.m.7 views

CVE-2024-12883

A vulnerability was found in code-projects Job Recruitment 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /email.php. The manipulation of the argument email leads to cross site scripting. The attack can be launched remotely. The...

6.1CVSS3.6AI score0.00799EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/21 12:0 a.m.7 views

code-projects Job Recruitment 代码注入漏洞

Code-Projects Job Recruitment is an open source job portal by Code-Projects. A code injection vulnerability exists in code-projects Job Recruitment version 1.0, which stems from the parameter email being vulnerable to cross-site scripting attacks...

6.9CVSS5AI score0.00799EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/12/21 12:0 a.m.7 views

Codezips E-Commerce Website 注入漏洞

Codezips E-Commerce Website is an open source e-commerce website by Codezips. An injection vulnerability exists in Codezips E-Commerce Website version 1.0, which originates from an SQL injection in the parameter email...

9.8CVSS7.9AI score0.00786EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/12/21 12:0 a.m.8 views

PT-2024-17774 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A problem has been found in the file / email.php, affecting an unknown functionality. The manipulation of the email argument leads to cross-site scripting. The attack can be launched...

6.9CVSS6.6AI score0.00799EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/12/20 12:0 a.m.5 views

WordPress plugin Feedify – Web Push Notifications 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

6.1CVSS7.7AI score0.00359EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/12/20 12:0 a.m.8 views

PT-2024-17267 · WordPress · Feedify – Web Push Notifications

Name of the Vulnerable Software and Affected Versions: The Feedify – Web Push Notifications plugin for WordPress versions up to, and including, 2.4.2 Description: The issue is related to Reflected Cross-Site Scripting via the platform, phone, email, and store url parameters due to insufficient...

6.1CVSS8.7AI score0.00359EPSS
SaveExploits0References7
OSV
OSV
added 2024/12/19 6:15 p.m.8 views

CVE-2024-12792

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file newadmin.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed...

9.8CVSS5.8AI score0.00636EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/12/19 12:0 a.m.9 views

PT-2024-17742 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue has been found in the signin.php file, affecting unknown processes. The manipulation of the email argument leads to SQL injection. The attack can be initiated remotely. The...

9.8CVSS8.1AI score0.00646EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/12/19 12:0 a.m.9 views

Codezips E-Commerce Site 注入漏洞

Codezips E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in Codezips E-Commerce Site version 1.0, which originates from an SQL injection vulnerability contained in the email parameter of the newadmin.php file...

9.8CVSS7.7AI score0.00636EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.7 views

Codezips Project Management System 注入漏洞

Codezips Project Management System is an open source project management system from Codezips. An injection vulnerability exists in CodeZips Project Management System version 1.0, which stems from an incorrect manipulation of the parameter email that can lead to SQL injection...

9.8CVSS7.9AI score0.00663EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/12/05 12:0 a.m.14 views

PT-2024-17498 · Unknown · Codezips Project Management System

Name of the Vulnerable Software and Affected Versions: CodeZips Project Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /index.php. The manipulation of the email argument leads to SQL injection. It is possible to initiate...

9.8CVSS8.1AI score0.00663EPSS
SaveExploits1References8
OSV
OSV
added 2024/11/28 6:15 p.m.2 views

CVE-2024-11967

A vulnerability was found in PHPGurukul Complaint Management system 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/reset-password.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.8AI score0.00724EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.7 views

PHPGurukul Complaint Management System 注入漏洞

PHPGurukul Complaint Management System is a complaint management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Complaint Management System, which originates in the /admin/reset-password.php file with the parameter email for SQL injection...

9.8CVSS8AI score0.00724EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.6 views

PHPGurukul Complaint Management System 注入漏洞

PHPGurukul Complaint Management System is a complaint management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Complaint Management System, which originates in the /user/reset-password.php file with SQL injection in the parameter email...

9.8CVSS7.8AI score0.00827EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.6 views

PHPGurukul Complaint Management System 注入漏洞

PHPGurukul Complaint Management System is a complaint management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Complaint Management System version 1.0, which stems from the parameter emailid in the file /user/index.php that can cause SQL injection...

9.8CVSS8AI score0.00827EPSS
SaveExploits1References5
Rows per page
Query Builder