Lucene search
+L

82 matches found

Positive Technologies
Positive Technologies
•added 2023/06/09 12:00 a.m.•15 views

PT-2023-23457 · Sourcecodester · Sourcecodester Lost/Found Information System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lost and Found Information System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file admininquiriesview inquiry.php. This issue leads to sql injection and can ...

8.8CVSS7.4AI score0.00728EPSS
SaveExploits1References5
OSV
OSV
•added 2023/04/28 2:15 p.m.•12 views

CVE-2023-2371

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•2 views

CVE-2023-2371: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.5AI score0.00834EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•20 views

PT-2023-19405 · Sourcecodester · Sourcecodester Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue affects the processing of the file /admin/inquiries/view inquiry.php, where the manipulation of the id argument leads to sql injection. The attack can be...

6.5CVSS7AI score0.0063EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/28 12:00 a.m.•0 views

CVE-2023-2411: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS5.5AI score0.0063EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•10 views

PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...

9.8CVSS7.2AI score0.00834EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•1 views

CVE-2023-2346: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/inquiries/viewinquiry.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack...

9.8CVSS5.5AI score0.0082EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/12/14 12:00 a.m.•13 views

Helmet Store Showroom Site 跨站脚本漏洞

Helmet Store Showroom Site is a platform by Carlo Montero Personal Developer. It allows potential customers of Inquiries Stores to virtually display helmet products. A security vulnerability exists in Helmet Store Showroom Site v1.0, which stems from the presence of cross-site scripting attacks X...

6.1CVSS5.9AI score0.01271EPSS
SaveExploits1References4
OSV
OSV
•added 2022/12/02 5:15 p.m.•12 views

CVE-2022-44347

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/viewinquiry&id=...

7.2CVSS5.8AI score0.00734EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/12/02 12:00 a.m.•12 views

PT-2022-27187 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /php-sms/admin/?page=inquiries/view inquiry&id= endpoint. The id parameter is vulnerable to this type of attack. SQL...

7.2CVSS7.2AI score0.00734EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/12/02 12:00 a.m.•10 views

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Sanitization Management System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...

7.2CVSS7.3AI score0.00734EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/10/06 6:18 p.m.•7 views

CVE-2022-42250

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

7.2CVSS5.8AI score0.00895EPSS
SaveExploits1References2
OSV
OSV
•added 2022/10/06 6:18 p.m.•13 views

CVE-2022-42250

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

7.2CVSS5.8AI score0.00895EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/10/06 12:00 a.m.•11 views

Simple Cold Storage Management System SQL注入漏洞

Simple Cold Storage Management System is a web-based application used as a cold storage business website to provide their customers or potential customers with an easy-to-access platform to learn about their company. A SQL injection vulnerability exists in Simple Cold Storage Management System...

7.2CVSS8.1AI score0.00895EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•2 views

CVE-2022-42250: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

7.2CVSS7.2AI score0.00895EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/10/06 12:00 a.m.•16 views

PT-2022-26334 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the /csms/admin/inquiries/view details.php?id= endpoint. The id variable is vulnerable to SQL injection attacks. Recommendations: For...

7.2CVSS7.1AI score0.00895EPSS
SaveExploits1References4
The Hacker News
The Hacker News
•added 2022/07/02 4:22 a.m.•52 views

TikTok Assures U.S. Lawmakers it's Working to Safeguard User Data From Chinese Staff

Following heightened worries that U.S. users' data had been accessed by TikTok engineers in China between September 2021 and January 2022, the company sought to assuage U.S. lawmakers that it's taking steps to "strengthen data security." The admission that some China-based employees can access...

6.5AI score
SaveExploits0
CNVD
CNVD
•added 2022/07/01 12:00 a.m.•66 views

SourceCodester Online Railway Reservation System SQL注入漏洞(CNVD-2022-53357)

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

7.2CVSS3.2AI score0.00956EPSS
SaveExploits1References1
OSV
OSV
•added 2022/06/29 5:15 p.m.•13 views

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/29 5:15 p.m.•7 views

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
Rows per page
Query Builder