Lucene search
+L

1296 matches found

NVD
NVD
•added 2022/05/13 3:15 p.m.•15 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS0.01096EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/05/13 3:15 p.m.•6 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS7.4AI score0.01096EPSS
SaveExploits1References2
Prion
Prion
•added 2022/05/13 3:15 p.m.•17 views

Sql injection

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

7.5CVSS9.8AI score0.01096EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/05/13 2:55 p.m.•29 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

10AI score0.01096EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/05/13 12:00 a.m.•7 views

Pharmacy Sales And Inventory System SQL注入漏洞

Pharmacy Sales And Inventory System is a pharmacy sales and inventory system by Carlo Montero Individual Developer. Pharmacy Sales And Inventory System v1.0 contains a security vulnerability that can be exploited by an attacker to conduct an SQL injection attack via...

9.8CVSS8.5AI score0.01096EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/13 12:00 a.m.•3 views

CVE-2022-30407: Improper Neutralization of Special Elements used in an SQL Command

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS8.3AI score0.01096EPSS
SaveExploits1References2
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
•added 2021/09/29 2:53 p.m.•69 views

A9: Using Components with Known Vulnerabilities ❗️ — Top 10 OWASP 2017

A9: Using Components with Known Vulnerabilities ❗️ — Top 10 OWASP 2017 Introduction A9: Using Components with Known Vulnerabilities What are Components With Known Vulnerabilities? Top 10 OWASP describes the term components as a very broad term. It can either be a full piece of software that our...

6.6AI score
SaveExploits0
CNVD
CNVD
•added 2021/07/23 12:00 a.m.•63 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS5.8AI score0.01517EPSS
SaveExploits1References1
NVD
NVD
•added 2021/07/22 6:15 p.m.•28 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS0.01517EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/22 6:15 p.m.•20 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS6.1AI score0.01517EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/22 6:15 p.m.•24 views

Sql injection

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

7.5CVSS9.8AI score0.01517EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/07/22 5:10 p.m.•63 views

CVE-2021-25202

CVE-2021-25202 describes a SQL injection vulnerability in the SourceCodester Sales and Inventory System v1.0. The flaw allows remote attackers to execute arbitrary SQL statements through the id parameter in the path \ahira\admin\inventory.php. The condition enables potential disclosure or modific...

9.8CVSS9.9AI score0.01517EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/22 5:10 p.m.•38 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

10AI score0.01517EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/22 12:00 a.m.•6 views

CVE-2021-25202: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS6.4AI score0.01517EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/07/22 12:00 a.m.•17 views

Bakeshop Inventory System SQL注入漏洞

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS6.3AI score0.01517EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/05/11 12:00 a.m.•16 views

Sourcecodester Equipment Inventory System Cross-Site Scripting Vulnerability

Sourcecodester Equipment Inventory System is a Sourcecodester open source application. It is used to organize and track its equipment. Sourcecodester Equipment Inventory System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary javascrip...

5.4CVSS6.2AI score0.00774EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/28 2:15 p.m.•4 views

CVE-2021-29387

Multiple stored cross-site scripting XSS vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any "Add" sections, such as Add Item , Employee and Position or others in the Name Parameters...

5.4CVSS6.1AI score
SaveExploits0References2
NVD
NVD
•added 2021/04/28 2:15 p.m.•28 views

CVE-2021-29387

Multiple stored cross-site scripting XSS vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any "Add" sections, such as Add Item , Employee and Position or others in the Name Parameters...

5.4CVSS0.00774EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/04/28 2:15 p.m.•14 views

CVE-2021-29387

Multiple stored cross-site scripting XSS vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any "Add" sections, such as Add Item , Employee and Position or others in the Name Parameters...

5.4CVSS6.3AI score0.00774EPSS
SaveExploits1References3
CVE
CVE
•added 2021/04/28 1:22 p.m.•47 views

CVE-2021-29387

Sourcecodester Equipment Inventory System 1.0 is affected by multiple stored cross-site scripting (XSS) vulnerabilities. The issue allows remote attackers to inject arbitrary JavaScript via the Name Parameters in the Add sections (e.g., Add Item, Employee, Position). Root cause is stored XSS, ena...

5.4CVSS5.4AI score0.00774EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder