Lucene search
+L

1066 matches found

Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•42 views

PT-2022-23565 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/categories/manage category.php" API endpoint. Recommendation...

8.8CVSS8.8AI score0.00925EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/08/19 2:15 p.m.•8 views

CVE-2022-34621

Mealie 1.0.0beta3 was discovered to contain an Insecure Direct Object Reference IDOR vulnerability which allows attackers to modify user passwords and other attributes via modification of the userid parameter...

6.5CVSS5.9AI score0.01027EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/08/18 12:00 a.m.•11 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code for attendance and automatic generation of library card by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.2 due to a SQL injection in the bookId parameter of its...

9.8CVSS8.7AI score0.00952EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/05 12:00 a.m.•14 views

SourceCodester Garage Management System SQL注入漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. Garage Management System suffers from a SQL injection vulnerability that stems from the parameter id that causes sql...

8.8CVSS8.1AI score0.0054EPSS
SaveExploits0References2
OSV
OSV
•added 2022/08/02 3:15 a.m.•9 views

CVE-2022-34950

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php...

9.8CVSS5.8AI score0.00914EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/08/02 3:15 a.m.•4 views

CVE-2022-34954

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at invoiceprint.php...

9.8CVSS6AI score0.00914EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/02 12:00 a.m.•11 views

Pharmacy Management System SQL注入漏洞

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from a lack of validation of the id parameter in editcategory.php against external input SQL...

9.8CVSS6.1AI score0.00914EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/29 12:00 a.m.•15 views

SourceCodester Garage Management System SQL注入漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It can help you manage all your vehicles, cars and motorcycles. A SQL injection vulnerability exists in SourceCodester Garage Management System version 1.0, which stems from the fact...

8.8CVSS8.1AI score0.00686EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/06/28 12:15 a.m.•4 views

CVE-2022-34132

Jorani v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at application/controllers/Leaves.php...

9.8CVSS7.3AI score0.01582EPSS
SaveExploits0References3
OSV
OSV
•added 2022/06/24 2:15 a.m.•10 views

CVE-2022-32393

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/viewcell.php:4...

8.8CVSS5.8AI score0.01261EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/24 2:15 a.m.•8 views

CVE-2022-32405

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...

8.8CVSS7.4AI score0.01261EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/24 2:15 a.m.•8 views

CVE-2022-32396

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/visits/managevisit.php:4...

8.8CVSS5.8AI score0.01261EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/24 2:15 a.m.•12 views

CVE-2022-32405

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/prisons/viewprison.php:4...

8.8CVSS5.8AI score0.01261EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/21 2:15 p.m.•12 views

CVE-2022-33055

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•12 views

ZZCMS SQL注入漏洞

ZZCMS is a content management system CMS by the ZZCMS team in China. A security vulnerability exists in ZZCMS 2019 version, which can be exploited by an attacker to perform a SQL injection attack via the id parameter in /user/dlsdownload.php...

8.8CVSS5.9AI score0.00982EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/16 12:00 a.m.•13 views

PowerJob 安全漏洞

PowerJob is an open source distributed computing and job scheduling framework that allows developers to easily schedule tasks in their own applications. a security vulnerability exists in PowerJob 3.2.2 and prior versions. An attacker could exploit the vulnerability to change an arbitrary user...

7.5CVSS5.8AI score0.00786EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/06/14 4:15 p.m.•9 views

CVE-2022-32343

Hospital's Patient Records Management System v1.0 is vulnerable to SQL Injection via hprms/admin/roomtypes/manageroomtype.php?id=...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/14 4:15 p.m.•8 views

CVE-2022-32335

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/menus/managemenu.php?id=...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•13 views

Fast Food Ordering System SQL注入漏洞

Fast Food Ordering System is a fast food ordering system from Carlo Montero's personal developer. version 1.0 of Fast Food Ordering System is vulnerable to SQL injection, which originates from /ffos/admin/sales/receipt.php?id=page missing validation of external input SQL statements, which can be...

7.2CVSS6AI score0.00956EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/08 10:15 a.m.•8 views

CVE-2022-1688

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the id parameter before using it in various SQL statement via the admin dashboard, leading to SQL Injections...

4CVSS5.8AI score0.00795EPSS
SaveExploits2References3
Rows per page
Query Builder