Lucene search
+L

2574 matches found

Vulnrichment
Vulnrichment
•added 2024/12/26 8:00 p.m.•15 views

CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7AI score0.00529EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/26 8:00 p.m.•62 views

CVE-2024-12964

CVE-2024-12964 affects the open-source project 1000 Projects Daily College Class Work Report Book (version 1.0). The vulnerability stems from a flaw in the code path handling the user parameter in /login.php , enabling SQL injection . Reports indicate the issue is exploitable remotely and that th...

9.8CVSS7.4AI score0.00529EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•18 views

PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...

9.8CVSS8.6AI score0.00529EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•7 views

CVE-2024-12964: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

9.8CVSS5.5AI score0.00529EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/21 2:00 p.m.•38 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00798EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/21 2:00 p.m.•93 views

CVE-2024-12884

CVE-2024-12884 affects Codezips E-Commerce Website 1.0. The vulnerability is an SQL injection in the login.php function triggered by manipulating the email parameter, allowing remote exploitation. Multiple connected sources corroborate the issue and describe it as critical, with exploitation disc...

9.8CVSS7.4AI score0.00798EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/21 2:00 p.m.•13 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.9AI score0.00798EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/21 12:00 a.m.•6 views

CVE-2024-12884: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.5AI score0.00798EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/10 8:15 p.m.•45 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...

9.8CVSS0.0062EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/10 12:00 a.m.•91 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection within the login.php file. The root cause is a lack of validation for externally entered SQL statements provided via the emailcont parameter. This vulnerability allows for the potential injection of malicious SQL co...

9.8CVSS8.1AI score0.0062EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/12/10 12:00 a.m.•19 views

PT-2024-35757 · Phpgurukul · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul's Beauty Parlour Management System version 1.1 Description: The issue concerns SQL Injection in the login.php file through the emailcont parameter. This allows for potential exploitation by injecting malicious SQL code...

9.8CVSS7.2AI score0.0062EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/10 12:00 a.m.•3 views

CVE-2024-53480: Improper Neutralization of Special Elements used in an SQL Command

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits1References3
OSV
OSV
•added 2024/11/28 4:15 p.m.•17 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS5.8AI score0.00908EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/28 3:31 p.m.•19 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00908EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/11/28 3:31 p.m.•46 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS0.00908EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/28 12:00 a.m.•16 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is a Code-Projects open source car rental software. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter uname in the file /login.php that causes SQL injection...

9.8CVSS8AI score0.00908EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/28 12:00 a.m.•5 views

CVE-2024-11962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS7AI score0.00908EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/15 7:31 p.m.•70 views

CVE-2024-11256

CVE-2024-11256 details (NORMAL) : Affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is a SQL injection in the login.php flow caused by unsafely handling the username parameter, enabling remote abuse. Descriptions consistently classify this as critical with potential rem...

9.8CVSS7.7AI score0.00707EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•5 views

CVE-2024-11256: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The exploit has bee...

9.8CVSS7AI score0.00707EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/14 12:00 a.m.•27 views

PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...

9.8CVSS8.4AI score0.00603EPSS
SaveExploits1References5
Rows per page
Query Builder