Lucene search
+L

522 matches found

CNVD
CNVD
•added 2022/04/24 12:00 a.m.•75 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35531)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=delete & msgid= where the msgid parameter lacks validation for external...

9.8CVSS3.4AI score0.01239EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•52 views

Sourcecodester Baby Care System SQL注入漏洞(CNVD-2022-35530)

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=read & msgid= where the msgid parameter lacks validation for external...

9.8CVSS3.7AI score0.01239EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/21 8:15 p.m.•9 views

CVE-2022-28427

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

9.8CVSS5.9AI score0.01239EPSS
SaveExploits1References2
OSV
OSV
•added 2022/04/21 8:15 p.m.•18 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS5.8AI score0.01239EPSS
SaveExploits1References1
OSV
OSV
•added 2022/04/21 8:15 p.m.•17 views

CVE-2022-28427

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

9.8CVSS5.8AI score0.01239EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/21 8:15 p.m.•11 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS5.9AI score0.01239EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/21 8:15 p.m.•32 views

CVE-2022-28429

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=...

9.8CVSS0.01239EPSS
SaveExploits1References1
Prion
Prion
•added 2022/04/21 8:15 p.m.•21 views

Sql injection

Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=...

7.5CVSS9.7AI score0.01239EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/04/21 12:00 a.m.•19 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=read & msgid= where the msgid parameter lacks validation for external...

9.8CVSS6AI score0.01239EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/04/21 12:00 a.m.•32 views

Sourcecodester Baby Care System SQL注入漏洞

Sourcecodester Baby Care System is an application of the Sourcecodester community in the United States. Sourcecodester Baby Care System v1.0 contains a SQL injection vulnerability that originates in /admin/inbox.php & action=delete & msgid= where the msgid parameter lacks validation for external...

9.8CVSS6.1AI score0.01239EPSS
SaveExploits1References2
Huntr
Huntr
•added 2022/02/02 4:45 a.m.•12 views

Improper Authorization in bytebase/bytebase

Description Hello bytebase team, there is an improper privilege management in bytebase source code. This allows a user to view another user inbox. Proof of Concept 1. Install bytebase, create new user user1and user2 2. Login as user1, go to this link /api/inbox?user=user-id and change user-id to ...

2.4AI score
SaveExploits0
OSV
OSV
•added 2021/12/03 5:15 p.m.•20 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS5.7AI score0.00585EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/03 5:15 p.m.•35 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS0.00585EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/12/03 5:00 p.m.•39 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

4.3CVSS8.5AI score0.00585EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/12/03 12:00 a.m.•4 views

PT-2021-18455

Name of the Vulnerable Software and Affected Versions IBM Cognos Analytics versions 11.1.7 through 11.2.0 Description The issue allows an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts due to cross-site request forgery CSRF in the My Inbox...

8.8CVSS0.00585EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/03 12:00 a.m.•7 views

CVE-2021-29756: Cross-Site Request Forgery (CSRF)

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS6AI score0.00585EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/02 12:00 a.m.•11 views

CVE-2021-29756

IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery CSRF in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167...

8.8CVSS6.1AI score0.00585EPSS
SaveExploits0References4Affected Software1
OpenVAS
OpenVAS
•added 2021/10/27 12:00 a.m.•93 views

Mahara <= 20.10 CSRF Vulnerability

Mahara is prone to a cross-site request forgery CSRF vulnerability that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a...

6.5CVSS6.8AI score0.01545EPSS
SaveExploits1References1
Kitploit
Kitploit
•added 2021/09/21 11:30 a.m.•140 views

MailRipV2 - Improved SMTP Checker / SMTP Cracker With Proxy-Support, Inbox Test And Many More Features

Your SMTP checker / SMTP cracker for mailpass combolists including features like: proxy-support SOCKS4 / SOCKS5 with automatic proxy-scraper and checker, e-mail delivery / inbox check and DNS lookup for unknown SMTP-hosts. Made for easy usage and always working! Overview Legal Notices You are ONL...

7.4AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/09/15 12:00 a.m.•62 views

Siemens Teamcenter Access Control Error Vulnerability

An access control error vulnerability exists in Siemens Teamcenter, a product lifecycle management computer software application from Siemens, Germany. The vulnerability is due to a failure of the surrogate function on the application user profile to perform sufficient access control, which could...

7.1CVSS3.4AI score0.00585EPSS
SaveExploits0References1
Rows per page
Query Builder