Lucene search
+L

224 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 7:59 a.m.11 views

CVE-2024-33405

SQL injection vulnerability in addfriends.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the friendindex parameter...

8.6CVSS8.6AI score0.00522EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:10 p.m.12 views

CVE-2022-37808

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB...

9.8CVSS7.9AI score0.01013EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:55 p.m.9 views

CVE-2022-35558

A stack overflow vulnerability exists in /goform/WifiMacFilterGet in Tenda W6 V1.0.0.94122 version, which can be exploited by attackers to cause a denial of service DoS via the index parameter...

7.5CVSS7.1AI score0.00907EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 8:51 p.m.9 views

CVE-2021-31627

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the index parameter...

8.8CVSS7.5AI score0.01098EPSS
Exploits1References1
OSV
OSV
added 2025/02/20 11:15 p.m.2 views

CVE-2025-25679

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function...

8CVSS6.2AI score0.00263EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/20 12:0 a.m.19 views

CVE-2025-25679

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function...

0.00263EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/12 12:0 a.m.7 views

PT-2025-6866 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: Prestashop version 8.1.7 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability due to the lack of proper validation of user input. This affects the link parameter through the /index.php endpoint, specifically in...

4.8CVSS5.8AI score0.00256EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2025/02/05 6:17 a.m.7 views

CVE-2024-5384

A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned ...

9.8CVSS8.3AI score0.00813EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/07/05 12:0 a.m.9 views

PT-2024-28391 · Unknown · Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: Best House Rental Management System version 1.0 Description: The issue allows attackers to read arbitrary PHP files and access other sensitive information within the application through the Page parameter at "index.php". This is an arbitrary...

7.5CVSS7AI score0.00841EPSS
Exploits0References7
OSV
OSV
added 2024/05/28 4:15 p.m.5 views

CVE-2024-33802

A SQL injection vulnerability in /model/getstudentsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

6.5CVSS6.1AI score0.00426EPSS
Exploits1References1
OSV
OSV
added 2024/05/28 4:15 p.m.5 views

CVE-2024-33800

A SQL injection vulnerability in /model/getstudent1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

9.8CVSS6.1AI score0.0051EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/05/28 12:0 a.m.5 views

PT-2024-25489 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue exists in the /model/get student subject.php file, allowing an attacker to execute arbitrary SQL commands by manipulating the index parameter...

6.5CVSS8.6AI score0.00426EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/05/28 12:0 a.m.7 views

Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the index...

6.5CVSS8AI score0.00426EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/05/28 12:0 a.m.8 views

PT-2024-25487 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the index parameter in the "/model/get student1.php" API endpoint. Recommendations:...

9.8CVSS8.6AI score0.0051EPSS
Exploits1References3
OSV
OSV
added 2024/05/23 3:15 a.m.4 views

CVE-2024-5231

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /view/teachersalarydetails.php. The manipulation of the argument index leads to sql injection. The attack may be...

6.5CVSS6.5AI score0.00407EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/05/23 12:0 a.m.6 views

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in the Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

9.8CVSS8AI score0.0051EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.5 views

PT-2024-26252 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the my index parameter in the "/view/find friends.php" API endpoint. Recommendations...

9.8CVSS8.6AI score0.0051EPSS
Exploits1References2
OSV
OSV
added 2024/05/20 2:15 a.m.8 views

CVE-2024-5112

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /view/studentprofile.php. The manipulation of the argument stdindex leads to sql injection. The attack can be initiated...

6.5CVSS5.8AI score0.00488EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/05/20 12:0 a.m.4 views

PT-2024-34538 · Unknown · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /view/teacher profile.php. The manipulation of the index argument leads to...

6.5CVSS7.1AI score0.00488EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/05/20 12:0 a.m.5 views

Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Complete Web-Based School Management System, which originates from an unknown function in /view/teacherattendancehistory1.p...

6.5CVSS7AI score0.00458EPSS
Exploits1References5
Rows per page
Query Builder