Lucene search
+L

259 matches found

Positive Technologies
Positive Technologies
added 2025/12/01 12:0 a.m.7 views

PT-2025-48460

Name of the Vulnerable Software and Affected Versions Blood Bank Management System version 1.0 Description A SQL injection issue exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application does not properly sanitize user-supplied input used in SQL querie...

10CVSS7.9AI score0.00587EPSS
Exploits1References8
Cvelist
Cvelist
added 2025/12/01 12:0 a.m.11 views

CVE-2025-63534

A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg and...

8.5CVSS0.00186EPSS
Exploits0References3
CVE
CVE
added 2025/12/01 12:0 a.m.17 views

CVE-2025-63534

CVE-2025-63534 describes a reflected XSS vulnerability in Blood Bank Management System 1.0, specifically in the login.php component. The root cause is improper sanitization/encoding of user-provided input, allowing an attacker to inject JavaScript via the msg and error parameters, which executes ...

8.5CVSS5.5AI score0.00186EPSS
Exploits0References3Affected Software1
RedhatCVE
RedhatCVE
added 2025/11/25 2:20 a.m.16 views

CVE-2025-13578

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

9.8CVSS7AI score0.00346EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/24 2:2 a.m.6 views

EUVD-2025-198600

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS6.6AI score0.00346EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/24 12:0 a.m.12 views

PT-2025-47873

A vulnerability has been found in code-projects Library System 1.0. This affects an unknown function of the file /index.php of the component Login. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.5CVSS7.2AI score0.00346EPSS
Exploits1References6
NVD
NVD
added 2025/11/23 4:15 p.m.4 views

CVE-2025-13555

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument studno results in sql injection. The attack can be initiated remotely. The exploit is now public an...

9.8CVSS0.00346EPSS
Exploits1References5
OSV
OSV
added 2025/11/23 3:15 p.m.4 views

CVE-2025-13554

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score0.00346EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/11/23 12:0 a.m.10 views

PT-2025-47846

Name of the Vulnerable Software and Affected Versions Campcodes Supplier Management System version 1.0 Description A security issue exists in Campcodes Supplier Management System 1.0. The vulnerability involves the Login component and specifically affects the /index.php file. Manipulation of the...

7.5CVSS7.4AI score0.00346EPSS
Exploits1References12
EUVD
EUVD
added 2025/11/17 3:30 p.m.8 views

EUVD-2025-197791

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.6AI score0.00379EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:0 a.m.8 views

PT-2025-47145

Name of the Vulnerable Software and Affected Versions CodeAstro Simple Inventory System version 1.0 Description A flaw exists in CodeAstro Simple Inventory System 1.0 that allows for potential SQL injection. This issue is located within the Login component, specifically in the /index.php file...

9.8CVSS7.1AI score0.00379EPSS
Exploits1References10
RedhatCVE
RedhatCVE
added 2025/10/29 1:11 a.m.8 views

CVE-2025-12342

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

7.5CVSS7.2AI score0.00295EPSS
Exploits0References1
NVD
NVD
added 2025/10/28 1:16 a.m.5 views

CVE-2025-12342

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

7.5CVSS0.00295EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/28 1:2 a.m.3 views

CVE-2025-12342 Serdar Bayram Ghost Hot Spot Login Auth.php sql injection

A flaw has been found in Serdar Bayram Ghost Hot Spot up to 20251014. The affected element is an unknown function of the file /Auth.php of the component Login. This manipulation causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used...

7.5CVSS6.3AI score0.00295EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/28 12:0 a.m.9 views

PT-2025-44077

Name of the Vulnerable Software and Affected Versions Serdar Bayram Ghost Hot Spot versions prior to 20251015 Description A flaw exists in the Login component of Serdar Bayram Ghost Hot Spot. This issue is due to a SQL injection vulnerability within an unknown function of the /Auth.php file. The...

7.5CVSS7.3AI score0.00295EPSS
Exploits0References7
CNNVD
CNNVD
added 2025/10/28 12:0 a.m.10 views

Serdar Bayram Ghost Hot Spot SQL注入漏洞

Serdar Bayram Ghost Hot Spot is a Portal Authentication System software by Serdar Bayram Individual Developer. A SQL injection vulnerability exists in Serdar Bayram Ghost Hot Spot 20251014 and earlier versions, which stems from a SQL injection vulnerability in the component Login in the file...

7.5CVSS7.7AI score0.00295EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2021-21851

Malware in sbrugna...

6.1CVSS6.1AI score0.0327EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2013-0494

Malware in sbrugna...

5CVSS6.4AI score0.01173EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2005-1001

Malware in sbrugna...

6.1CVSS6.4AI score0.00706EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-3230

Malware in sbrugna...

6.1CVSS6.3AI score0.01106EPSS
Exploits1References3
Rows per page
Query Builder