Lucene search
+L

462 matches found

CNVD
CNVD
•added 2024/02/28 12:00 a.m.•86 views

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14035)

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS7.9AI score0.00721EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/02/28 12:00 a.m.•72 views

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14038)

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of external input SQL statement validation , an attacker can exploit the...

8.8CVSS9.1AI score0.00706EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/02/28 12:00 a.m.•56 views

Simple School Managment System SQL Injection Vulnerability

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS7.8AI score0.00721EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/02/28 12:00 a.m.•56 views

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14039)

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS7.8AI score0.00706EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/02/28 12:00 a.m.•62 views

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14036)

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS7.8AI score0.00721EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/01/24 12:00 a.m.•29 views

The vulnerability of the corporate version of the GitHub Enterprise Server, related to the use of external management input for class selection, allows a perpetrator to execute arbitrary code.

The vulnerability of the corporate version of the GitHub Enterprise Server is related to the use of external management input data for class selection. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

7.2CVSS8.4AI score0.71725EPSS
SaveExploits1References6Affected Software1
OSV
OSV
•added 2024/01/03 3:15 a.m.•11 views

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

9.8CVSS5.9AI score0.00659EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/03 3:15 a.m.•39 views

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

9.8CVSS9AI score0.00659EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/03 3:15 a.m.•32 views

Path traversal

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

7.5CVSS7.1AI score0.00659EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/03 2:59 a.m.•9 views

CVE-2023-45722 Path Traversal Arbitrary File Read affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

8.8CVSS9.4AI score0.00659EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•13 views

PT-2024-13277 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to a path traversal arbitrary file read vulnerability. It occurs because the product uses external input to construct a pathname intended to identify a fi...

9.8CVSS9.2AI score0.00659EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/11/30 12:00 a.m.•13 views

Apache Cocoon SQL注入漏洞

Apache Cocoon is the United States Apache Apache Foundation of a component-based Web development concepts built Web application framework. Apache Cocoon suffers from a SQL injection vulnerability that stems from the application's lack of validation of externally entered SQL statements. An attacke...

9.8CVSS8.2AI score0.01102EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/11/14 12:00 a.m.•98 views

RHEL 8 : emacs (RHSA-2023:7083)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7083 advisory. GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp,...

9.8CVSS7.8AI score0.01617EPSS
SaveExploits0References8
NVD
NVD
•added 2023/08/03 7:15 p.m.•42 views

CVE-2023-0956

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

7.5CVSS7.5AI score0.01019EPSS
SaveExploits0References3
Prion
Prion
•added 2023/08/03 7:15 p.m.•32 views

Xxe

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

5CVSS7.4AI score0.01019EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/08/03 6:08 p.m.•48 views

CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

7.5CVSS7.7AI score0.01019EPSS
SaveExploits0References3
CNVD
CNVD
•added 2023/08/03 12:00 a.m.•60 views

Simple Online Mens Salon Management System SQL Injection Vulnerability (CNVD-2023-65139)

Simple Online Mens Salon Management System is open source a men's salon management system . Simple Online Mens Salon Management System v1.0 version of the SQL injection vulnerability, the vulnerability stems from the file /admin/?page=user/manageuser &id=3 parameter id lack of validation of...

9.8CVSS8.2AI score0.0082EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/05/04 12:00 a.m.•76 views

OURPHP SQL Injection Vulnerability

OURPHP is OURPHP open source an open source, cross-platform, enterprise-level + e-commerce + applet + APP multi-terminal synchronization CMS station-building system. OURPHP version 7.2.0 and previous versions exist SQL injection vulnerability. The vulnerability stems from the application's lack o...

9.8CVSS7.9AI score0.00953EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/04/18 12:00 a.m.•67 views

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29415)

Campcodes Advanced Online Voting System is an online voting system. The Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter description of the file /admin/positionsadd.ph...

9.9AI score0.00788EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2023/04/18 12:00 a.m.•46 views

Campcodes Advanced Online Voting System SQL Injection Vulnerability

Campcodes Advanced Online Voting System is an online voting system. Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the file /admin/votersrow.php, which can be...

8.2AI score0.0074EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder