Lucene search
+L

2812 matches found

CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•12 views

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Sales and Inventory System, which stems from an incorrect manipulation of the parameter cid in the file /pages/cashtransaction.php that resul...

9.8CVSS7.9AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•14 views

CampCodes Sales and Inventory System 安全漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. A security vulnerability exists in CampCodes Sales and Inventory System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter cid in the file /pages/transaction.ph...

9.8CVSS7.7AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/10 12:00 a.m.•16 views

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. An injection vulnerability exists in CampCodes Sales and Inventory System version 1.0, which stems from an incorrect manipulation of the file /pages/creditoradd.php resulting in SQL injection...

9.8CVSS7.9AI score0.00555EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•18 views

CampCodes Online Food Ordering System 安全漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which is caused by SQL injection due to the operation of the ticketid parameter in the file...

9.8CVSS7.8AI score0.00607EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/05/09 12:00 a.m.•24 views

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the ID parameter of the /editupatient.php file. An attacker can exploi...

8.8CVSS7AI score0.00902EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/05/07 2:20 p.m.•34 views

CVE-2025-47509 WordPress Top 10 plugin <= 4.1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ajay Top 10 top-10 allows Stored XSS.This issue affects Top 10: from n/a through = 4.1.0...

6.5CVSS0.00262EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/07 12:00 a.m.•20 views

Drupal Enterprise MFA - TFA for Drupal module < 4.7.0,5.0.0-5.1.0 - Unauthenticated Broken Access Control vulnerability

Drupal Enterprise MFA - TFA for Drupal module 4.7.0,5.0.0-5.1.0 - Unauthenticated Broken Access Control vulnerability discovered by Conrad Lara cmlara in WordPress Module Enterprise MFA - TFA for Drupal versions 4.7.0,5.0.0-5.1.0...

4.8CVSS7AI score0.00282EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/05/07 12:00 a.m.•22 views

Drupal Enterprise MFA - TFA for Drupal module < 4.7.0,5.0.0-5.1.0 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Drupal Enterprise MFA - TFA for Drupal module 4.7.0,5.0.0-5.1.0 - Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Juraj Nemec poker10 in WordPress Module Enterprise MFA - TFA for Drupal versions 4.7.0,5.0.0-5.1.0...

8.8CVSS7AI score0.00201EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•11 views

WordPress plugin WP jQuery DataTable 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

5.9CVSS6.2AI score0.00275EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/05/07 12:00 a.m.•16 views

WordPress plugin Top 10 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS6.6AI score0.00262EPSS
SaveExploits0References1
Packet Storm
Packet Storm
•added 2025/05/06 12:00 a.m.•92 views

📄 Grokability Snipe-IT 8.0.4 Insecure Direct Object Reference

Grokability Snipe-IT versions 8.0.4 and below suffer from an insecure direct object reference vulnerability. Exploit Title: Grokability Snipe-IT 8.0.4 - Insecure Direct Object Reference IDOR Google Dork: N/A Date: 2025-05-02 Exploit Author: Sn1p3r-H4ck3r Siripong Jintung Vendor Homepage:...

5CVSS6.3AI score0.01303EPSS
SaveExploits4
CNNVD
CNNVD
•added 2025/05/02 12:00 a.m.•19 views

PHPGurukul Online DJ Booking Management System 注入漏洞

PHPGurukul Online DJ Booking Management System is an online DJ booking management system from PHPGurukul Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Online DJ Booking Management System, which originates from a SQL injection due to a misuse of the parameter fromdate in...

9.8CVSS7.8AI score0.00562EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•18 views

PHPGurukul Pre-School Enrollment System 注入漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul Pre-School Enrollment System, which stems from an incorrect manipulation of the parameter Status resulting in SQL injection...

8.8CVSS7.1AI score0.00462EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/05/01 12:00 a.m.•19 views

SourceCodester Online Eyewear Shop 安全漏洞

SourceCodester Online Eyewear Shop is a SourceCodester open source online eyewear store website project developed using PHP and MySQL, which provides an online shopping and ordering platform for the eyewear business and its potential customers. A security vulnerability exists in SourceCodester...

8.8CVSS6.9AI score0.00525EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•16 views

PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new Crown Pneumonia Testing Management System from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which stems from SQL injection due to incorrect manipulation of the...

9.8CVSS7.2AI score0.00519EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•17 views

PHPGurukul COVID19 Testing Management System 注入漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter contactno in the file...

9.8CVSS7.8AI score0.00519EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•18 views

Code-Projects Patient Record Management System 安全漏洞

Code-Projects Patient Record Management System is an open source patient record management system from Code-Projects. A security vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter...

7.5CVSS6.8AI score0.00454EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/28 12:00 a.m.•19 views

CodeAstro Membership Management System 注入漏洞

CodeAstro Membership Management System is a membership management system from CodeAstro. An injection vulnerability exists in CodeAstro Membership Management System version 1.0, which is caused by SQL injection due to the operation of the parameter ID in the file renew.php?id=6...

9.8CVSS7.8AI score0.00555EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•25 views

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a cross-site request forgery due to a misbehavior in file/api/article/del...

5.3CVSS4.9AI score0.00302EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/04/27 12:00 a.m.•15 views

Books-Management-System 安全漏洞

Books-Management-System is a book management system by withstars individual developers. A security vulnerability exists in Books-Management-System version 1.0, which stems from a misbehavior in the file /allreaders.html resulting in a missing authorization...

9.8CVSS7.4AI score0.00656EPSS
SaveExploits1References5
Rows per page
Query Builder