Lucene search
+L

1044 matches found

CNNVD
CNNVD
added 2025/06/22 12:0 a.m.8 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter transactionid in the file...

9.8CVSS8.2AI score0.00394EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/22 12:0 a.m.8 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter roomid in the file...

9.8CVSS8.2AI score0.00394EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/22 12:0 a.m.7 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /update.php. An attacker can exploit this vulnerability...

9.8CVSS8.2AI score0.00394EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

Medical Card Generation System /admin/unreadenq.ph File SQL Injection Vulnerability

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the /admin/unreadenq.ph file. An attacker can...

8.8CVSS7.1AI score0.0037EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.5 views

Medical Card Generation System /admin/manage-card.php File SQL Injection Vulnerability

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of the /admin/manage-card.php file. An attacker ca...

8.8CVSS7.1AI score0.0037EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
added 2025/06/08 12:0 a.m.4 views

VulnCheck KEV: CVE-2022-25488

Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php...

9.8CVSS5.9AI score0.07148EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.4 views

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter itrno/compid in the file /birthing.php. An attacker can...

7.5CVSS7.1AI score0.00314EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.4 views

PHPGurukul Medical Card Generation System 安全漏洞

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the /admin/readenq.php file. An attacker can...

8.8CVSS8.1AI score0.0037EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.7 views

WordPress plugin Forminator Forms 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6AI score0.00238EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/06/04 12:0 a.m.6 views

CodeAstro Real Estate Management System 注入漏洞

CodeAstro Real Estate Management System is a real estate management system from CodeAstro. An injection vulnerability exists in CodeAstro Real Estate Management System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter ID in the file...

8.8CVSS6.8AI score0.00422EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/02 6:15 p.m.6 views

CVE-2025-27956

Directory Traversal vulnerability in WebLaudos 24.2 04 allows a remote attacker to obtain sensitive information via the id parameter...

7.5CVSS5.8AI score0.0105EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.7 views

Pixeon WebLaudos 路径遍历漏洞

Pixeon WebLaudos is an application from Pixeon that allows access to inspection reports issued by the system. A security vulnerability exists in Pixeon WebLaudos version 24.2 04 that stems from an issue with the id parameter and could lead to access to sensitive information...

7.5CVSS8.9AI score0.0105EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/06/02 12:0 a.m.8 views

AssamLook CMS 安全漏洞

AssamLook CMS is a software for content management from AssamLook India. A security vulnerability exists in AssamLook CMS version 1.0, which stems from a SQL injection due to incorrect manipulation of the parameter ID in the file /viewtender.php...

9.8CVSS6.9AI score0.004EPSS
SaveExploits1References4
OSV
OSV
added 2025/05/23 4:15 p.m.7 views

CVE-2024-51103

PHPGURUKUL Student Management System using PHP and MySQL v1 was discovered to contain multiple SQL injection vulnerabilities at /studentrecordms/password-recovery.php via the emailid and id parameters...

6.5CVSS5.8AI score0.00336EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:21 a.m.8 views

CVE-2024-38347

CodeProjects Health Care hospital Management System v1.0 was discovered to contain a SQL injection vulnerability in the Room Information module via the id parameter...

8.8CVSS6AI score0.00569EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:19 a.m.13 views

CVE-2024-36840

SQL Injection vulnerability in Boelter Blue System Management v.1.3 allows a remote attacker to execute arbitrary code and obtain sensitive information via the id parameter to newsdetails.php and locationdetails.php; and the section parameter to services.php...

9.1CVSS7.6AI score0.02241EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:18 a.m.4 views

CVE-2024-36597

Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the clientid parameter at clientStatus.php...

8.8CVSS5.6AI score0.02338EPSS
SaveExploits5References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.6 views

CVE-2024-37831

Itsourcecode Payroll Management System 1.0 is vulnerable to SQL Injection in payrollitems.php via the ID parameter...

9.8CVSS6AI score0.00411EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:21 a.m.6 views

CVE-2024-10731

A vulnerability, which was classified as critical, was found in Tongda OA up to 11.10. Affected is an unknown function of the file /pda/appcenter/checkseal.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS7.2AI score0.00534EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:13 a.m.7 views

CVE-2023-24777

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list...

9.8CVSS8.4AI score0.00741EPSS
SaveExploits1References1
Rows per page
Query Builder