Lucene search
+L

1509 matches found

Cvelist
Cvelist
added 2024/10/31 12:0 a.m.32 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

0.005EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/31 12:0 a.m.15 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

8.1AI score0.005EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/31 12:0 a.m.7 views

PHPGurukul Teachers Record Management System 安全漏洞

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

9.1CVSS7.9AI score0.005EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/31 12:0 a.m.67 views

CVE-2024-51063

Summary: Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php through the mobile number or email parameter. The issue is reported across multiple feeds and aligned with a high-impact CVSS profile (CVSS 3.1: 9.1, CRITICAL; Confidentiality and Integrit...

9.1CVSS8.3AI score0.005EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.15 views

PT-2024-16329 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /login.php. The manipulation of the email argument leads to sql injection. The attack can...

9.8CVSS7.8AI score0.00797EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.8 views

PT-2024-16327 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue was found in the system, affecting the /login.php file. The manipulation of the email argument leads to SQL injection. The attack can be initiated...

9.8CVSS8AI score0.00797EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2024/10/25 5:15 p.m.3 views

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00301EPSS
SaveExploits1References2
OSV
OSV
added 2024/10/25 4:15 p.m.6 views

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...

9.8CVSS6.2AI score0.00889EPSS
SaveExploits1References1
NVD
NVD
added 2024/10/25 4:15 p.m.32 views

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...

9.8CVSS0.00889EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/10/25 4:15 p.m.4 views

CVE-2022-30355

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00473EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.11 views

PT-2024-33155 · Unknown · Best Courier Management System

Name of the Vulnerable Software and Affected Versions: Best courier management system in php version 1.0 Description: The issue allows a remote attacker to execute arbitrary code via the email parameter of the "login request" API endpoint. This enables the attacker to inject malicious SQL code,...

9.8CVSS8.3AI score0.00889EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/10/25 12:0 a.m.13 views

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

7.1AI score0.00301EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/25 12:0 a.m.14 views

PT-2024-11553 · Ovaledge · Ovaledge

Name of the Vulnerable Software and Affected Versions: OvalEdge versions 5.2.8.0 and earlier Description: The issue allows for an Account Takeover via a POST request to "/profile/updateProfile" using the userId and email parameters. Authentication is required to exploit this issue. Recommendation...

9.8CVSS6.5AI score0.00473EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/10/25 12:0 a.m.16 views

CVE-2024-48580

SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request...

9.1AI score0.00889EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.10 views

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /profile/updateProfile via the userId...

9.8CVSS6.8AI score0.00473EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.6 views

Best Courier Management System 安全漏洞

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the email parameter of a login request...

9.8CVSS7.7AI score0.00889EPSS
SaveExploits1References1
CVE
CVE
added 2024/10/25 12:0 a.m.62 views

CVE-2024-48580

CVE-2024-48580 affects Best courier management system (PHP v1.0). The vulnerability is a SQL Injection in the login request’s email parameter, enabling a remote attacker to execute arbitrary code. The CVE entry reports this as a high-severity issue with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A...

9.8CVSS8.4AI score0.00889EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/10/25 12:0 a.m.9 views

OvalEdge 安全漏洞

OvalEdge is a solution from US-based OvalEdge that helps users create, manage and use data from a variety of sources through AI and human intelligence. A security vulnerability exists in OvalEdge version 5.2.8.0 and earlier, which stems from a POST request to /profile/updateProfile via the userId...

9.8CVSS6.8AI score0.00301EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/15 9:15 p.m.10 views

CVE-2024-48411

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection SQLI via a crafted payload to the val-email parameter in forgetpassword.php...

9.8CVSS5.8AI score0.00531EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.5 views

Code-Projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. Code-Projects Blood Bank Management System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter fullname/username/password/email in the file...

9.8CVSS7.8AI score0.00805EPSS
SaveExploits1References7
Rows per page
Query Builder