Lucene search
+L

24 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•3 views

CVE-2022-36725: Improper Neutralization of Special Elements used in an SQL Command

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /student/dele.php...

9.8CVSS8.2AI score0.01053EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•4 views

CVE-2022-36729: Improper Neutralization of Special Elements used in an SQL Command

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the MId parameter at /librarian/del.php...

9.8CVSS8.2AI score0.00952EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/06/06 12:00 a.m.•3 views

CVE-2018-9839: Improper Input Validation

An issue was discovered in MantisBT through 1.3.14, and 2.0.0. Using a crafted request on bugreportpage.php modifying the 'mid' parameter, any user with REPORTER access or above is able to view any private issue's details summary, description, steps to reproduce, additional information when cloni...

6.5CVSS5.8AI score0.01218EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/07/22 12:00 a.m.•4 views

CVE-2018-14501: Improper Neutralization of Special Elements used in an SQL Command

manager/adminajax.php in joyplus-cms 1.6.0 has SQL Injection, as demonstrated by crafted POST data beginning with an "mid=1 AND SLEEP5" substring...

9.8CVSS8.2AI score0.01452EPSS
SaveExploits1References2
Rows per page
Query Builder