Lucene search
+L

2783 matches found

CNNVD
CNNVD
added 2024/10/24 12:00 a.m.12 views

Digitory Multi Channel Integrated POS 安全漏洞

Digitory Multi Channel Integrated POS is an integrated POS system from Digitory, Inc. A security vulnerability exists in Digitory Multi Channel Integrated POS v1.0, which stems from a lack of rate limiting in the OTP validation component, allowing an attacker to access the ordering system and pla...

9.1CVSS6.7AI score0.00398EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/24 12:00 a.m.8 views

PT-2024-16207 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical issue was found in the function delete tenant of the file "/ajax.php?action=delete tenant". The manipulation of the argument id leads to SQL injection. The...

9.8CVSS8.4AI score0.00573EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.7 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which originates from the parameter viewid in the file /admin/view-card-detail.php that can lead...

7.2CVSS5.7AI score0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.10 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter editid in the file /admin/edit-card-detail.php that can lead to S...

7.2CVSS5.8AI score0.00411EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/22 10:15 p.m.9 views

CVE-2024-48657

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

7.2CVSS6.1AI score0.00871EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.9 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version v1.0.0 that stems from the presence of a SQL injection vulnerability...

8.1CVSS8.2AI score0.00871EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.10 views

AWS ALB Route Directive Adapter For Istio 安全漏洞

AWS ALB Route Directive Adapter For Istio is an AWS ALB Route Directive Adapter for Istio open source by Amazon Web Services. A security vulnerability exists in AWS ALB Route Directive Adapter For Istio v1.0 and v1.1 that stems from the use of a JWT for authentication that lacks proper signer and...

7.5CVSS8.2AI score0.00351EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.7 views

PT-2024-33563 · Gerryworks · Gerryworks Post By Mail

Name of the Vulnerable Software and Affected Versions: GERRYWORKS Post by Mail versions n/a through 1.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability in GERRYWORKS Post by Mail, which allows Privilege Escalation. Recommendations: For versions n/a through 1.0...

8.8CVSS6.9AI score0.00422EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.9 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Boat Booking System version 1.0, which originates in the /admin/edit-subadmin.php page of the Edit Subdomain Details Page component, where sadminusername/fullname/...

7.2CVSS6.8AI score0.00528EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.8 views

Codezips Sales Management System SQL注入漏洞

Codezips Sales Management System is an open source sales management system from Codezips. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which stems from a parameter id in the file eletecustcom.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/10/20 12:00 a.m.11 views

PT-2024-16110 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A security issue has been found in the Manage Supplier Page component, specifically in the file /manage supplier.php. The manipulation of the address argument leads to cross-si...

5.1CVSS4AI score0.0039EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/10/19 12:00 a.m.11 views

PT-2024-16076 · Unknown · Sourcecodester Sentiment Based Movie Rating System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sentiment Based Movie Rating System version 1.0 Description: A critical issue has been found, allowing for SQL injection through the manipulation of the id argument in an unknown function of the file /msrps/movie details.php...

9.8CVSS7.1AI score0.00553EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/10/19 12:00 a.m.11 views

PT-2024-16067 · Unknown · Phpgurukul Boat Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Boat Booking System version 1.0 Description: A critical issue was found in the PHPGurukul Boat Booking System, affecting some unknown functionality of the file status.php of the component Check Booking Status Page. The manipulation...

9.8CVSS8.1AI score0.00644EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/10/19 12:00 a.m.9 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which originates from an SQL injection vulnerability contained in the nopeople parameter in the book-boat.php?bid=1 page of the Book a...

9.8CVSS6.8AI score0.00664EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/10/19 12:00 a.m.6 views

PT-2024-16055 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been identified, affecting unknown code in the file /manage invoice.php. The manipulation of the invoice number argument leads to SQL injection. This issue...

9.8CVSS8.2AI score0.00544EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/10/18 12:00 a.m.17 views

PT-2024-33368 · WordPress · Peter Cyclop Wordpress Video

Name of the Vulnerable Software and Affected Versions: Peter CyClop WordPress Video versions n/a through 1.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS attacks. Recommendation...

6.5CVSS5.7AI score0.00256EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/10/18 12:00 a.m.10 views

WordPress plugin Mitm Bug Tracker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS6.1AI score0.00262EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.7 views

PT-2024-15981 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been found in the Pharmacy Management System. This issue affects the file /php/manage supplier.php?action=search, where the manipulation of the text argume...

9.8CVSS7.4AI score0.00579EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.7 views

PT-2024-15983 · Code Projects · Code-Projects Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical issue has been found in the processing of the file /php/manage medicine stock.php, where the manipulation of the argument name/packing/generic name/suppliers name...

8.8CVSS7.3AI score0.00613EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/10/16 12:00 a.m.8 views

dingfanzu 安全漏洞

dingfanzu is a php-based takeaway ordering website by the individual developer gk2007. A security vulnerability exists in dingfanzu version 1.0, which is caused by a cross-site request forgery vulnerability in the addPro parameter of the component doAdminAction.php. A remote attacker can exploit...

6.1CVSS7.3AI score0.00263EPSS
SaveExploits1References2
Rows per page
Query Builder