Lucene search
+L

309 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 6:16 a.m.•17 views

SUSE CVE-2006-0200

Format string vulnerability in the error-reporting feature in the mysqli extension in PHP 5.1.0 and 5.1.1 might allow remote attackers to execute arbitrary code via format string specifiers in MySQL error messages...

9.3CVSS8.1AI score0.19363EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/02/15 6:11 a.m.•11 views

SUSE CVE-2007-3997

The 1 MySQL and 2 MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safemode and openbasedir restrictions via MySQL LOCAL INFILE operations, as demonstrated by a query with LOAD DATA LOCAL INFILE...

7.5CVSS7AI score0.13818EPSS
SaveExploits7References4
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•51 views

Sourcecoester Theme Park Ticketing System SQL注入漏洞

Sourcecoester Theme Park Ticketing System is an application. A simple PHP/MySQLi project that helps manage and generate tickets for theme park or amusement park visitors. sourcecoester Theme Park Ticketing System v1.0 is vulnerable to a SQL injection vulnerability, which stems from a missing...

8.8CVSS1.9AI score0.00969EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•56 views

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar SQL Injection Vulnerability

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar an e-commerce project. ecommerce-project-with-php-and-mysqli-Fruits-Bazar version 1.0 is vulnerable to SQL injection, which stems from The keyword parameter of the searchproduct.php page lacks validation for external input SQL statements. An...

9.8CVSS5.9AI score0.01558EPSS
SaveExploits1References1
NVD
NVD
•added 2022/06/02 2:15 p.m.•22 views

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

9.8CVSS0.01558EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/02 2:15 p.m.•23 views

CVE-2022-30482

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

4.8CVSS0.00798EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/05/31 8:51 p.m.•33 views

CVE-2022-30478

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in \searchproduct.php via the keyword parameters...

10AI score0.01558EPSS
SaveExploits1References3
CVE
CVE
•added 2022/05/31 8:51 p.m.•88 views

CVE-2022-30478

CVE-2022-30478 affects the package “Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0.” The vulnerability is a SQL Injection in search_product.php triggered by the keyword parameter, due to lack of input validation. Public records (NVD, RH, CNVD, CNNVD, CNVD, etc.) consistently describe it a...

9.8CVSS9.8AI score0.01558EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/31 12:00 a.m.•2 views

CVE-2022-30482: Improper Neutralization of Input During Web Page Generation

Ecommerce-project-with-php-and-mysqli-Fruits-Bazar- 1.0 is vulnerable to Cross Site Scripting XSS in \admin\addcata.php via the ctgname parameters...

4.8CVSS5.6AI score0.00798EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2022/05/13 1:22 a.m.•50 views

phpMyAdmin Arbitrary file read vulnerability

An issue was discovered in phpMyAdmin before 4.8.5. When the AllowArbitraryServer configuration setting is set to true, with the use of a rogue MySQL server, an attacker can read any file on the server that the web server's user can access. This is related to the mysql.allowlocalinfile PHP...

5.9CVSS7AI score0.14829EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•26 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33140)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminposition edit.php lacks validation of external input S...

8.8CVSS5.9AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•27 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33141)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminposition delete.php lacks validation for external...

8.8CVSS5.9AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•76 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33143)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminovertime delete.php lacks validation of external input...

8.8CVSS5.9AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•31 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33139)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminschedule delete.php lacks validation of external input...

8.8CVSS5.3AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•22 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33144)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee edit.php lacks validation of external input...

8.8CVSS5.9AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•17 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33138)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminschedule edit.php lacks validation of external input S...

8.8CVSS5.3AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•35 views

Attendance and Payroll System SQL注入漏洞

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminattendancedelete.php lacks validation for...

8.8CVSS5.7AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•30 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33146)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admindeductionedit.php lacks validation for external inpu...

8.8CVSS6AI score0.01112EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•22 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33145)

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system from oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component adminemployee delete.php lacks validation of external inp...

8.8CVSS5.9AI score0.01442EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/04/24 12:00 a.m.•21 views

Attendance and Payroll System SQL注入漏洞(CNVD-2022-33149)

Attendance and Payroll System is an attendance and payroll system using PHP/MySQLi source code from oretnom23 individual developers.Attendance and Payroll System v1.0 is vulnerable to SQL injection, which originates from the component adminattendanceedit.php lacks validation for external input SQ...

8.8CVSS5.2AI score0.01112EPSS
SaveExploits1References1
Rows per page
Query Builder