Lucene search
+L

267 matches found

OSV
OSV
added 2023/03/09 9:15 p.m.9 views

CVE-2023-27207

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

9.8CVSS7.3AI score0.00872EPSS
SaveExploits1References2
Prion
Prion
added 2023/03/09 9:15 p.m.17 views

Sql injection

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

7.5CVSS9.7AI score0.00872EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/03/09 12:00 a.m.8 views

PT-2023-21006 · Unknown · Online Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: Online Pizza Ordering System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/manage user.php" API endpoint. Recommendations: For Online...

9.8CVSS9.5AI score0.00872EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2023/03/09 12:00 a.m.7 views

CVE-2023-27207

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

9.8AI score0.00872EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/03/09 12:00 a.m.8 views

Best POS Management System SQL注入漏洞

Best pos management system is a best pos management system by Mayuri K. Personal developer. A security vulnerability exists in Best POS Management System version 1.0, which originates from a SQL injection vulnerability via the id parameter in /kruxton/manageuser.php...

9.8CVSS8.7AI score0.00788EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/03/09 12:00 a.m.19 views

PT-2023-21003 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: The issue is a SQL injection vulnerability that can be exploited via the id parameter at the "/kruxton/manage user.php" API endpoint. This allows for potential unauthorized access to sensiti...

9.8CVSS9.3AI score0.00788EPSS
SaveExploits1References6
OSV
OSV
added 2023/02/23 4:15 p.m.9 views

CVE-2023-0986

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manageuser of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

9.8CVSS6.5AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/23 4:15 p.m.21 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file admin/?page=user/manageuser of the component Edit User. The manipulation of the argument id leads to sql injection. It is possible to initiate the...

6.5CVSS9.7AI score0.00541EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 4:42 a.m.4 views

SUSE CVE-2017-12062

An XSS issue was discovered in manageuserpage.php in MantisBT 2.x before 2.5.2. The 'filter' field is not sanitized before being rendered in the Manage User page, allowing remote attackers to execute arbitrary JavaScript code if CSP is disabled...

6.1CVSS6.4AI score0.03904EPSS
SaveExploits1References3
OSV
OSV
added 2023/01/17 8:15 a.m.7 views

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.7AI score0.00915EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/01/17 12:00 a.m.12 views

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. SourceCodester Online Food Ordering System 2.0 suffers from a SQL injection vulnerability that originates in an unknown function in the file admin/manageuser.php, where manipulation of the...

9.8CVSS7.7AI score0.00915EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/01/17 12:00 a.m.6 views

PT-2023-16185 · Sourcecodester · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Food Ordering System version 2.0 Description: A critical issue has been discovered, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file admin/manage user.php. This ca...

9.8CVSS7.7AI score0.00915EPSS
SaveExploits1References4
OSV
OSV
added 2023/01/13 8:15 p.m.6 views

CVE-2022-46956

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

7.2CVSS5.8AI score
SaveExploits0References1
Prion
Prion
added 2023/01/13 8:15 p.m.18 views

Sql injection

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

5.8CVSS7.2AI score0.00804EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/13 12:00 a.m.7 views

CVE-2022-46956

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

7.2AI score0.00804EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/01/13 12:00 a.m.13 views

PT-2023-15117 · Unknown · Dynamic Transaction Queuing System

Name of the Vulnerable Software and Affected Versions: Dynamic Transaction Queuing System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/manage user.php" API endpoint. Recommendations: For...

7.2CVSS7.1AI score0.00804EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/01/13 12:00 a.m.9 views

Dynamic Transaction Queuing System SQL注入漏洞

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, a personal developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0, which stems from an id parameter in its /admin/manageuser.php component that allows an...

7.2CVSS7.2AI score0.00804EPSS
SaveExploits1References2
OSV
OSV
added 2023/01/06 3:15 a.m.10 views

CVE-2022-40049

SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manageuser.php page...

7.5CVSS5.9AI score0.0098EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/01/06 12:00 a.m.32 views

CVE-2022-40049

SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manageuser.php page...

7.8AI score0.0098EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/01/06 12:00 a.m.9 views

PT-2023-13746 · Sourcecodester · Theme Park Ticketing System

Name of the Vulnerable Software and Affected Versions: sourcecodester Theme Park Ticketing System version 1.0 Description: The issue allows remote attackers to view sensitive information. This is achieved via the id parameter to the "/tpts/manage user.php" API endpoint. Recommendations: For...

7.5CVSS6.5AI score0.0098EPSS
SaveExploits1References4
Rows per page
Query Builder