Lucene search
+L

2317 matches found

Cvelist
Cvelist
•added 2024/11/11 12:00 a.m.•23 views

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/03 12:00 p.m.•34 views

CVE-2024-10733 code-projects Restaurant Order System login.php sql injection

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00652EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/03 12:00 p.m.•17 views

CVE-2024-10733 code-projects Restaurant Order System login.php sql injection

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.5AI score0.00652EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/03 12:00 a.m.•2 views

CVE-2024-10733: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS7AI score0.00652EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/11/01 12:00 a.m.•15 views

CVE-2024-48410

Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php...

6.5AI score0.00403EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 12:00 a.m.•40 views

CVE-2024-48410

Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php...

0.00403EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•1 views

CVE-2024-10608: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

9.8CVSS7AI score0.00698EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•1 views

CVE-2024-48410: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php...

6.1CVSS6.6AI score0.00403EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 12:00 a.m.•73 views

CVE-2024-48410

A Cross Site Scripting (XSS) vulnerability exists in the Camtrace IP video surveillance server, specifically in version v.9.16.2.1 . This flaw allows a remote attacker to execute arbitrary code by interacting with the login.php component. Proof-of-concept exploits have been published publicly. No...

7.3AI score0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/10/30 2:31 a.m.•17 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.4AI score0.00797EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/30 2:31 a.m.•54 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00797EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/10/30 2:31 a.m.•33 views

CVE-2024-10507 Codezips Free Exam Hall Seating Management System login.php sql injection

A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00797EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/30 12:00 a.m.•0 views

CVE-2024-10507: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips Free Exam Hall Seating Management System 1.0. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00797EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/30 12:00 a.m.•2 views

CVE-2024-10509: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS7AI score0.00797EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/25 12:00 a.m.•2 views

CVE-2024-48654: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Blood Bank v.1 allows a remote attacker to execute arbitrary code via a crafted script to the login.php component...

6.1CVSS6.6AI score0.0039EPSS
SaveExploits0References1
CVE
CVE
•added 2024/10/25 12:00 a.m.•66 views

CVE-2024-48654

The open-source blood bank management system Blood Bank v.1 is vulnerable to a Cross Site Scripting (XSS) flaw. A remote attacker can exploit this by submitting a crafted script to the login.php component, potentially leading to the execution of arbitrary code. To remediate this issue, users shou...

6.1CVSS7.3AI score0.0039EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/24 4:31 p.m.•29 views

CVE-2024-10335 SourceCodester Garbage Collection Management System login.php sql injection

A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

7.5CVSS0.00746EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/10/24 4:31 p.m.•12 views

CVE-2024-10335 SourceCodester Garbage Collection Management System login.php sql injection

A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

7.5CVSS9.7AI score0.00746EPSS
SaveExploits1References5
CVE
CVE
•added 2024/10/24 4:31 p.m.•59 views

CVE-2024-10335

CVE-2024-10335 affects SourceCodester Garbage Collection Management System 1.0. The vulnerability resides in the login.php code, where manipulation of the username and potentially password parameters leads to an SQL injection. Exploitation is described as remote, with public disclosure of the exp...

9.8CVSS7.7AI score0.00746EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/24 12:00 a.m.•1 views

CVE-2024-10335: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. T...

9.8CVSS7AI score0.00746EPSS
SaveExploits1References1
Rows per page
Query Builder