Lucene search
+L

995 matches found

CNNVD
CNNVD
added 2022/06/02 12:00 a.m.12 views

Simple Inventory System SQL注入漏洞

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection, which can be exploited by attackers to conduct SQL injection attacks via /inventory/tableeditajax.php...

9.8CVSS5.8AI score0.01137EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.7 views

Simple Inventory System SQL注入漏洞

Simple Inventory System is an inventory system. version 1.0 of Simple Inventory System is vulnerable to SQL injection attacks via /inventory/login.php...

7.2CVSS5.8AI score0.01008EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/06/01 1:22 p.m.27 views

CVE-2022-31339

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...

7.7AI score0.01008EPSS
SaveExploits1References1
CVE
CVE
added 2022/06/01 1:22 p.m.70 views

CVE-2022-31339

CVE-2022-31339 affects the Simple Inventory System v1.0, with a vulnerability in the login.php path that enables SQL injection. Multiple connected records (NVD, Red Hat, CNVD, CNNVD, CVE lists) confirm the vulnerability vector is via /inventory/login.php, indicating the issue resides in the login...

7.2CVSS7.3AI score0.01008EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/06/01 1:21 p.m.77 views

CVE-2022-31340

CVE-2022-31340 affects Simple Inventory System v1.0 and is due to a SQL Injection vulnerability in /inventory/table_edit_ajax.php. The Red Hat, CNVD, CNNVD and other feeds corroborate a SQLi issue in this exact path/component. CVSS data indicate a high-severity impact (high confidentiality, integ...

9.8CVSS9.8AI score0.01137EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/06/01 1:21 p.m.29 views

CVE-2022-31340

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/tableeditajax.php...

10AI score0.01137EPSS
SaveExploits1References1
NVD
NVD
added 2022/05/13 3:15 p.m.12 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS0.01079EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/05/13 3:15 p.m.5 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

9.8CVSS7.4AI score0.01079EPSS
SaveExploits1References2
Prion
Prion
added 2022/05/13 3:15 p.m.15 views

Sql injection

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

7.5CVSS9.8AI score0.01079EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/05/13 2:55 p.m.26 views

CVE-2022-30407

Pharmacy Sales And Inventory System v1.0 is vulnerable to SQL Injection via /pharmacy-sales-and-inventory-system/manageuser.php?id=...

10AI score0.01079EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/05/13 12:00 a.m.4 views

Pharmacy Sales And Inventory System SQL注入漏洞

Pharmacy Sales And Inventory System is a pharmacy sales and inventory system by Carlo Montero Individual Developer. Pharmacy Sales And Inventory System v1.0 contains a security vulnerability that can be exploited by an attacker to conduct an SQL injection attack via...

9.8CVSS8.5AI score0.01079EPSS
SaveExploits1References2
Ivan 'd0znpp' Novikov
Ivan 'd0znpp' Novikov
added 2021/09/29 2:53 p.m.62 views

A9: Using Components with Known Vulnerabilities ❗️ — Top 10 OWASP 2017

A9: Using Components with Known Vulnerabilities ❗️ — Top 10 OWASP 2017 Introduction A9: Using Components with Known Vulnerabilities What are Components With Known Vulnerabilities? Top 10 OWASP describes the term components as a very broad term. It can either be a full piece of software that our...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2021/07/23 12:00 a.m.57 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS5.8AI score0.01517EPSS
SaveExploits1References1
NVD
NVD
added 2021/07/22 6:15 p.m.25 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS0.01517EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 6:15 p.m.9 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

9.8CVSS6.1AI score0.01517EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/22 6:15 p.m.17 views

Sql injection

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

7.5CVSS9.8AI score0.01517EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/07/22 5:10 p.m.56 views

CVE-2021-25202

CVE-2021-25202 describes a SQL injection vulnerability in the SourceCodester Sales and Inventory System v1.0. The flaw allows remote attackers to execute arbitrary SQL statements through the id parameter in the path \ahira\admin\inventory.php. The condition enables potential disclosure or modific...

9.8CVSS9.9AI score0.01517EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/22 5:10 p.m.34 views

CVE-2021-25202

SQL injection vulnerability in SourceCodester Sales and Inventory System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to \ahira\admin\inventory.php...

10AI score0.01517EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.10 views

Bakeshop Inventory System SQL注入漏洞

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS6.3AI score0.01517EPSS
SaveExploits1References2
CNVD
CNVD
added 2021/05/11 12:00 a.m.15 views

Sourcecodester Equipment Inventory System Cross-Site Scripting Vulnerability

Sourcecodester Equipment Inventory System is a Sourcecodester open source application. It is used to organize and track its equipment. Sourcecodester Equipment Inventory System 1.0 suffers from a cross-site scripting vulnerability that can be exploited by an attacker to inject arbitrary javascrip...

5.4CVSS6.2AI score0.00774EPSS
SaveExploits1References1
Rows per page
Query Builder