Lucene search
+L

725 matches found

Positive Technologies
Positive Technologies
•added 2022/11/05 12:00 a.m.•20 views

PT-2022-24526 · Sourcecodester · Sourcecodester Sanitization Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sanitization Management System affected versions not specified Description: A critical vulnerability has been found in the SourceCodester Sanitization Management System. The issue is related to an unknown function of the file...

9.8CVSS9.5AI score0.00511EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2022/11/05 12:00 a.m.•23 views

Sanitation Management System security vulnerabilities

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System, which stems from an SQL injection caused by the manipulation of the parameter id by an unknown function in its file...

9.8CVSS8.3AI score0.00511EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/05 12:00 a.m.•8 views

CVE-2022-3868: Improper Neutralization

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=savequote. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. Th...

9.8CVSS7.9AI score0.00511EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2022/11/03 12:00 a.m.•40 views

CVE-2022-43062

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteappointment...

7.5AI score0.00777EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/11/03 12:00 a.m.•25 views

Online Diagnostic Lab Management System SQL Injection Vulnerability

Online Diagnostic Lab Management System is an online diagnostic lab management system. A security vulnerability exists in Online Diagnostic Lab Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter of /classes/Master.php?...

7.2CVSS7.3AI score0.00777EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/03 12:00 a.m.•14 views

CVE-2022-43062: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteappointment...

7.2CVSS7.2AI score0.00777EPSS
SaveExploits1References3
NVD
NVD
•added 2022/11/02 8:15 p.m.•34 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS0.00777EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/02 12:00 a.m.•7 views

CVE-2022-43068: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.2CVSS7.2AI score0.00777EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/02 12:00 a.m.•10 views

CVE-2022-43066: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

7.2CVSS7.2AI score0.00878EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/11/02 12:00 a.m.•41 views

CVE-2022-43066

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms/classes/Master.php?f=deletemessage...

7.5AI score0.00878EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/11/02 12:00 a.m.•39 views

CVE-2022-43068

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

7.5AI score0.00777EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/01 12:00 a.m.•11 views

CVE-2022-43355: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=deleteservice...

7.2CVSS7.2AI score0.00878EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2022/10/26 5:15 p.m.•17 views

CVE-2022-3673

A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the file /php-sms/classes/Master.php. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attac...

6.1CVSS4.1AI score0.00397EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/26 12:00 a.m.•6 views

CVE-2022-3673: Improper Neutralization

A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0. Affected is an unknown function of the file /php-sms/classes/Master.php. The manipulation of the argument message leads to cross site scripting. It is possible to launch the attac...

6.1CVSS4.8AI score0.00397EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2022/10/14 5:15 p.m.•19 views

CVE-2022-42232

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...

7.2CVSS5.8AI score0.01015EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•5 views

CVE-2022-42232: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...

7.2CVSS7.2AI score0.01015EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•7 views

CVE-2022-42242: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletebooking...

7.2CVSS7.2AI score0.01039EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/10/06 12:00 a.m.•8 views

PT-2022-25824

Name of the Vulnerable Software and Affected Versions Online Leave Management System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/leave system/classes/Master.php?f=delete department" endpoint. Recommendations For...

7.2CVSS0.01026EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/10/06 12:00 a.m.•25 views

Simple Cold Storage Management System SQL Injection Vulnerability

Simple Cold Storage Management System is a cold storage management system. Simple Cold Storage Management System /csms/classes/Master.php?f=deletemessage SQL injection vulnerability can be exploited by a remote attacker to submit a specially crafted SQL request to manipulate a database, obtain...

7.2CVSS8.2AI score0.01039EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/06 12:00 a.m.•4 views

CVE-2022-41355: Improper Neutralization of Special Elements used in an SQL Command

Online Leave Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /leavesystem/classes/Master.php?f=deletedepartment...

7.2CVSS7.2AI score0.01026EPSS
SaveExploits1References2
Rows per page
Query Builder