Lucene search
+L

331 matches found

CNNVD
CNNVD
added 2024/12/16 12:00 a.m.11 views

Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul. A security vulnerability exists in Online Nurse Hiring System version v1.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially crafted payload into the...

4.8CVSS6.7AI score0.00297EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/12/16 12:00 a.m.9 views

PT-2024-36481 · Unknown · Online Nurse Hiring System

Name of the Vulnerable Software and Affected Versions: Online Nurse Hiring System version 1.0 Description: A SQL injection issue was discovered in the /admin/profile.php component through the fullname parameter. This allows for potential exploitation. Recommendations: For Online Nurse Hiring Syst...

7.2CVSS7.5AI score0.0057EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2024/12/16 12:00 a.m.33 views

CVE-2024-55103

Online Nurse Hiring System v1.0 was discovered to contain a SQL injection vulnerability in the component /admin/profile.php via the fullname parameter...

0.0057EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.11 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Boat Booking System version 1.0, which originates from the sadminusername/fullname/emailid/mobilenumber parameter in the /admin/profile.php page of the My Profile Page...

7.5CVSS7.7AI score0.00622EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/15 12:00 a.m.7 views

Code-Projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. Code-Projects Blood Bank Management System version 1.0 suffers from a SQL injection vulnerability that originates from the parameter fullname/username/password/email in the file...

9.8CVSS7.8AI score0.00805EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2024/09/02 12:00 a.m.15 views

CVE-2024-45528

CodeAstro MembershipM-PHP aka Membership Management System in PHP 1.0 allows addmembers.php fullname stored XSS...

6.7AI score0.00284EPSS
SaveExploits1References1
Metasploit
Metasploit
added 2024/07/03 7:54 p.m.280 views

Azure CLI Credentials Gatherer

This module will collect the Azure CLI 2.0+ az cli settings files for all users on a given target. These configuration files contain JWT tokens used to authenticate users and other subscription information. Once tokens are stolen from one host, they can be used to impersonate the user from a...

7AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/06/27 12:00 a.m.9 views

PT-2024-37576 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailoring Management System version 1.0 Description: A critical issue was found in the Tailoring Management System, affecting the file customeradd.php. The manipulation of the fullname, address, phonenumber, sex, email, city, and comment...

9.8CVSS7AI score0.00612EPSS
SaveExploits1References7
OSV
OSV
added 2024/05/27 3:15 a.m.14 views

CVE-2024-5395

A vulnerability was found in itsourcecode Online Student Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file listofinstructor.php. The manipulation of the argument FullName leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS6.5AI score0.00614EPSS
SaveExploits1References4
CVE
CVE
added 2024/05/27 2:31 a.m.71 views

CVE-2024-5395

Affects itsourcecode Online Student Enrollment System 1.0. The vulnerability resides in processing the file listofinstructor.php, where manipulating the FullName parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Reported impact and exploitation...

8.8CVSS6.8AI score0.00614EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2024/05/06 12:00 a.m.7 views

Prison Management System 跨站脚本漏洞

Prison Management System is a prison management system developed by Carlo Montero. A cross-site scripting vulnerability exists in Prison Management System version 1.0, which originates in /Employee/edit-profile.php and contains unknown code that causes cross-site scripting through the use of the...

5.4CVSS4.6AI score0.00642EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/09 4:15 p.m.9 views

CVE-2024-2333

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

7.2CVSS5.7AI score0.00687EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/03/09 12:00 a.m.22 views

PT-2024-19811 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem is related to an unknown function in the file /add members.php, where the manipulation ...

7.2CVSS8.1AI score0.00687EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/02/29 12:00 a.m.15 views

Web-Based Student Clearance System SQL Injection Vulnerability

Web-Based Student Clearance System is a web-based student clearance system by the individual developer Ndueso Okorie. A SQL injection vulnerability exists in Web-Based Student Clearance System version 1.0, which stems from an incorrect manipulation of the parameter Fullname that can lead to sql...

7.2CVSS8.4AI score0.00714EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/01/29 12:00 a.m.18 views

PT-2024-16026 · Sourcecodester · Sourcecodester Employee Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Employee Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting the edit-profile.php file. The issue arises from the manipulation of the fullname, phone, date of birth,...

5.4CVSS4.1AI score0.00575EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/11/15 6:15 a.m.8 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.4CVSS6.1AI score0.00419EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/15 6:15 a.m.9 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.4CVSS5.8AI score0.00419EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/15 6:15 a.m.19 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.4CVSS0.00419EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/15 6:15 a.m.22 views

Cross site scripting

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

4.9CVSS6.3AI score0.00419EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/15 12:00 a.m.32 views

CVE-2023-47446

Pre-School Enrollment version 1.0 is vulnerable to Cross Site Scripting XSS on the profile.php page via fullname parameter...

5.5AI score0.00419EPSS
SaveExploits1References1
Rows per page
Query Builder