Lucene search
+L

2317 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•1 views

CVE-2025-1859: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul News Portal 4.1. This issue affects some unknown processing of the file /login.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to t...

9.8CVSS7AI score0.00489EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/03 12:00 a.m.•1 views

CVE-2025-1842: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit...

5.3CVSS3.6AI score0.00391EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/06 12:50 a.m.•20 views

CVE-2022-3583

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00722EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 10:27 a.m.•18 views

CVE-2024-12964

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

9.8CVSS7.3AI score0.00502EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 5:13 a.m.•25 views

CVE-2024-10509

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7.4AI score0.00797EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/04 10:28 p.m.•17 views

CVE-2024-8569

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely...

9.8CVSS7.4AI score0.00809EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/01/15 8:31 p.m.•15 views

CVE-2025-0486 Fanli2012 native-php-cms login.php sql injection

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploi...

7.5CVSS7.6AI score0.00509EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/15 12:00 a.m.•2 views

CVE-2025-0486: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploi...

9.8CVSS5.6AI score0.00509EPSS
SaveExploits1References1
CVE
CVE
•added 2025/01/04 12:31 p.m.•76 views

CVE-2025-0207

CVE-2025-0207 : In code-projects Online Shoe Store 1.0, the vulnerability is a SQL injection in the file /function/login.php triggered by manipulating the password parameter. The issue is remote-exploitable and has publicly disclosed exploits. Multiple sources (NVD, CVE listings, CNVD, Red Hat ad...

9.8CVSS7.5AI score0.00687EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/01/04 12:31 p.m.•47 views

CVE-2025-0207 code-projects Online Shoe Store login.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS0.00687EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•2 views

CVE-2025-0207: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. Th...

9.8CVSS5.5AI score0.00687EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/31 12:00 a.m.•2 views

CVE-2024-13085: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

9.8CVSS5.5AI score0.00506EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/26 8:00 p.m.•58 views

CVE-2024-12964

CVE-2024-12964 affects the open-source project 1000 Projects Daily College Class Work Report Book (version 1.0). The vulnerability stems from a flaw in the code path handling the user parameter in /login.php , enabling SQL injection . Reports indicate the issue is exploitable remotely and that th...

9.8CVSS7.4AI score0.00502EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/26 8:00 p.m.•32 views

CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS0.00502EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/26 8:00 p.m.•13 views

CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7AI score0.00502EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•2 views

CVE-2024-12964: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

9.8CVSS5.5AI score0.00502EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•15 views

PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...

9.8CVSS8.6AI score0.00502EPSS
SaveExploits1References11
Cvelist
Cvelist
•added 2024/12/21 2:00 p.m.•38 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00798EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/12/21 2:00 p.m.•11 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/21 2:00 p.m.•93 views

CVE-2024-12884

CVE-2024-12884 affects Codezips E-Commerce Website 1.0. The vulnerability is an SQL injection in the login.php function triggered by manipulating the email parameter, allowing remote exploitation. Multiple connected sources corroborate the issue and describe it as critical, with exploitation disc...

9.8CVSS7.4AI score0.00798EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder