Lucene search
+L

96 matches found

CNNVD
CNNVD
added 2024/06/25 12:0 a.m.6 views

Simple Online Hotel Reservation System Security Vulnerability

Simple Online Hotel Reservation System is an online hotel reservation system. A security vulnerability exists in Simple Online Hotel Reservation System version 1.0, which originates from a parameter username in the file index.php that can lead to SQL injection...

9.8CVSS7.4AI score0.00682EPSS
Exploits1References4
OSV
OSV
added 2024/05/17 2:15 p.m.5 views

CVE-2024-5048

A vulnerability classified as critical was found in code-projects Budget Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument edit leads to sql injection. The attack can be launched remotely. The exploit has been...

9.8CVSS5.7AI score0.00629EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/05/06 12:0 a.m.5 views

campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the campcodes Complete Web-Based School Management System due to an SQL injection vulnerability in the name parameter of the index.p...

9.8CVSS7.8AI score0.00713EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/04/03 12:0 a.m.4 views

PHPGurukul Men Salon Management System 安全漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul, Inc. A security vulnerability exists in version v.2.0 of the PHPGurukul Men Salon Management System, which is caused by a SQL injection vulnerability in the email parameter of the index.php component...

9.8CVSS7.9AI score0.01217EPSS
Exploits2References2
OSV
OSV
added 2024/03/04 1:15 a.m.9 views

CVE-2024-2155

A vulnerability was found in SourceCodester Best POS Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file index.php. The manipulation of the argument page leads to file inclusion. The attack may be initiated remotely. The exploit has been...

4.3CVSS4.9AI score0.00513EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/13 12:0 a.m.5 views

SourceCodester House Rental Management System Cross-Site Scripting Vulnerability

House Rental Management System is a house rental management system by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in SourceCodester House Rental Management System version 1.0, which stems from a vulnerability in the index.php file...

4.8CVSS6.2AI score0.00502EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/06 12:0 a.m.3 views

PT-2024-15425 · Sourcecodester · Sourcecodester Clinic Queuing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Clinic Queuing System version 1.0 Description: A critical issue affects the processing of the file /index.php, specifically the component GET Parameter Handler. The manipulation of the page argument leads to file inclusion. Thi...

8.8CVSS7.1AI score0.20938EPSS
Exploits5References10
Positive Technologies
Positive Technologies
added 2023/11/10 12:0 a.m.8 views

PT-2023-32500 · Unknown · Phpgurukul Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Restaurant Table Booking System version 1.0 Description: A problematic vulnerability has been found in the PHPGurukul Restaurant Table Booking System, affecting an unknown function of the file index.php of the component Reservation...

6.1CVSS6.4AI score0.00491EPSS
Exploits0References5
OSV
OSV
added 2023/11/07 9:15 p.m.5 views

CVE-2023-46679

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtunameemail' parameter of the index.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00831EPSS
Exploits1References2
OSV
OSV
added 2023/09/10 2:15 a.m.6 views

CVE-2023-4870

A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input "alert1 leads to cross site scripting. It ...

6.1CVSS3.9AI score0.00562EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2023/03/28 12:0 a.m.7 views

The vulnerability of the index.php script of the PHP Xextplorer file manager allows a hacker to execute arbitrary code.

The vulnerability of the index.php script of the PHP Xextplorer file manager is related to deficiencies in access control. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

9CVSS7.9AI score0.02398EPSS
Exploits2References6Affected Software1
CNNVD
CNNVD
added 2022/08/15 12:0 a.m.6 views

Guest Management System SQL注入漏洞

Guest Management System is a web-based system designed to monitor the records of everyone entering a school or college. The Guest Management System suffers from a SQL injection vulnerability that stems from unknown code in its index.php component that manipulates the parameters username/pass to...

9.8CVSS7.5AI score0.00737EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2022/08/15 12:0 a.m.7 views

The vulnerability of the /index.php file of the SourceCodester Online Admission System allows a attacker to perform XSS attacks.

The vulnerability of the /index.php file of the SourceCodester Online Admission System exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

5CVSS6.3AI score0.00516EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/08/11 12:0 a.m.7 views

PT-2022-18556 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Loan Management System affected versions not specified Description: A critical issue affects some unknown functionality of the file /index.php. The manipulation of the password argument leads to SQL injection. The attack can be...

9.8CVSS8AI score0.01059EPSS
Exploits1References6
CNNVD
CNNVD
added 2022/08/04 12:0 a.m.5 views

Online Admission System 跨站脚本漏洞

Online Admission System is an online admission system by the individual developer RASHMI KUMARI. A cross-site scripting vulnerability exists in the Online Admission System, which originates from an unknown function in its component index.php that passes a special string to the parameter eid,...

6.1CVSS5.2AI score0.00577EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/07/25 12:0 a.m.4 views

ffmpeg-sdk 命令注入漏洞

ffmpeg-sdk is a ffmpeg wrapper for nodejs by the individual developer Shajan Jacob in India. A security vulnerability exists in ffmpeg-sdk, which stems from the vulnerability of index.js to command injection attacks...

9.8CVSS8.3AI score0.01112EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/20 12:0 a.m.6 views

Microweber 跨站脚本漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. A cross-site scripting vulnerability exists in Microweber versions prior to 1.2.17, whic...

6.5CVSS5.8AI score0.02907EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/02/10 5:15 p.m.4 views

CVE-2021-44892

A Remote Code Execution RCE vulnerability exists in ThinkPHP 3.x.x via valuefilename in index.php, which could let a malicious user obtain server control privileges...

8.8CVSS7.4AI score0.02021EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/02/10 12:0 a.m.12 views

ThinkPHP 安全漏洞

ThinkPHP is a PHP-based, open source, lightweight web application development framework from China's Top Thinking Information Technology Company. A security vulnerability exists in ThinkPHP, which stems from a Remote Code Execution RCE vulnerability in ThinkPHP 3.x. An attacker can exploit this...

8.8CVSS8AI score0.02021EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/10/01 12:0 a.m.6 views

FlexTV beta 跨站脚本漏洞

FlexTV beta is an open source project. A cross-site scripting vulnerability exists in index.php in the development version of FlexTV beta, which allows remote attackers to inject arbitrary web script or HTML via PHP SELF parameters...

6.1CVSS6.2AI score0.00716EPSS
Exploits0References1
Rows per page
Query Builder