Lucene search
+L

202 matches found

Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.6 views

PT-2024-28873 · Unknown · Kashipara Live Membership System

Name of the Vulnerable Software and Affected Versions: Kashipara Live Membership System version 1.0 Description: A Cross-Site Request Forgery CSRF issue was found in the Kashipara Live Membership System. This could lead to an attacker tricking the administrator into deleting valid member data via...

8.8CVSS6.2AI score0.00334EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2024/03/09 3:31 p.m.15 views

CVE-2024-2333 CodeAstro Membership Management System add_members.php sql injection

A vulnerability classified as critical has been found in CodeAstro Membership Management System 1.0. Affected is an unknown function of the file /addmembers.php. The manipulation of the argument fullname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

6.5CVSS7.4AI score0.00687EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/03/09 12:0 a.m.16 views

PT-2024-19811 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue has been found in the CodeAstro Membership Management System. The problem is related to an unknown function in the file /add members.php, where the manipulation ...

7.2CVSS8.1AI score0.00687EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2024/03/03 5:31 p.m.17 views

CVE-2024-2149 CodeAstro Membership Management System settings.php sql injection

A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. This vulnerability affects unknown code of the file settings.php. The manipulation of the argument currency leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed ...

5.8CVSS7.5AI score0.00624EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/03/03 12:0 a.m.7 views

CodeAstro Membership Management System SQL Injection Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Membership Management System version 1.0, which originates from a SQL injection vulnerability in the parameter currency in the file settings.php...

7.2CVSS7.9AI score0.00624EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/02/28 12:0 a.m.7 views

PT-2024-21175 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: An Unrestricted File Upload issue allows a remote attacker to execute arbitrary code via upload of a crafted php file in the settings.php component. Recommendations: For CodeAstr...

8.8CVSS8.2AI score0.1869EPSS
Exploits1References6
CNNVD
CNNVD
added 2024/02/28 12:0 a.m.4 views

CodeAstro Membership Management System SQL Injection Vulnerability

CodeAstro Membership Management System is a membership management system from CodeAstro, Inc. A SQL injection vulnerability exists in CodeAstro Membership Management System v.1.0 that could allow a remote attacker to execute arbitrary SQL commands via the email parameter in the index.php componen...

8.8CVSS8.5AI score0.00786EPSS
Exploits1References2
OSV
OSV
added 2024/02/27 5:15 p.m.4 views

CVE-2024-1924

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /getmembershipamount.php. The manipulation of the argument membershipTypeId leads to sql injection. It is possible to initiate the attack remotely...

5.3CVSS5.7AI score0.00475EPSS
Exploits1References3
OSV
OSV
added 2024/02/23 3:15 p.m.4 views

CVE-2024-1819

A vulnerability was found in CodeAstro Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the component Add Members Tab. The manipulation of the argument Member Photo leads to unrestricted upload. It is possible to initiate the attack remotely. T...

7.2CVSS5.4AI score0.00672EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/02/23 12:0 a.m.8 views

PT-2024-18334 · Unknown · Codeastro Membership Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Membership Management System version 1.0 Description: A critical issue affects the Add Members Tab component, where the manipulation of the Member Photo argument leads to unrestricted upload. This can be initiated remotely. The issu...

7.2CVSS7AI score0.00672EPSS
Exploits1References5
OSV
OSV
added 2023/12/28 5:15 p.m.5 views

CVE-2023-7132

A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the file /userregistration/ of the component User Registration. The manipulation of the argument userName/firstName/lastName/userEmail with th...

5.4CVSS3.7AI score0.00613EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/12/28 12:0 a.m.7 views

Intern Membership Management System security breach

Intern Membership Management System is an intern membership management system. A security vulnerability exists in Intern Membership Management System. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

9.8CVSS6.5AI score0.0072EPSS
Exploits1References4
NVD
NVD
added 2023/09/29 12:15 p.m.18 views

CVE-2023-5260

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7.4AI score0.00684EPSS
Exploits1References3
OSV
OSV
added 2023/09/29 12:15 p.m.7 views

CVE-2023-5260

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS5.7AI score0.00684EPSS
Exploits1References3
Prion
Prion
added 2023/09/29 12:15 p.m.18 views

Sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS9.7AI score0.00684EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/29 12:0 p.m.8 views

CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS7.4AI score0.00684EPSS
Exploits1References3
Cvelist
Cvelist
added 2023/09/29 12:0 p.m.33 views

CVE-2023-5260 SourceCodester Simple Membership System group_validator.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of the file groupvalidator.php. The manipulation of the argument clubid leads to sql injection. The attack may be initiated remotely. The...

6.5CVSS10AI score0.00684EPSS
Exploits1References3
CVE
CVE
added 2023/09/29 12:0 p.m.58 views

CVE-2023-5260

The CVE-2023-5260 issue affects SourceCodester Simple Membership System 1.0, specifically the group_validator.php file where manipulating the club_id argument causes SQL injection. Documents indicate the attack can be initiated remotely and that exploits have been publicly disclosed. Connected so...

9.8CVSS7.4AI score0.00684EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2023/09/29 12:0 a.m.6 views

Simple Membership System SQL Injection Vulnerability

Simple Membership System is a simple membership system by Razormist Personal Developer. A SQL injection vulnerability exists in Simple Membership System version 1.0, which stems from the parameter clubid in the file groupvalidator.php that can lead to sql injection...

9.8CVSS8.4AI score0.00684EPSS
Exploits1References4
NVD
NVD
added 2023/09/17 5:15 p.m.25 views

CVE-2023-5027

A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file clubvalidator.php. The manipulation of the argument club leads to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS7AI score0.00533EPSS
Exploits1References3
Rows per page
Query Builder