Lucene search
+L

320 matches found

CVE
CVE
•added 2022/03/02 8:51 p.m.•115 views

CVE-2022-25045

CVE-2022-25045 concerns Home Owners Collection Management System v1.0, where hardcoded credentials are reported to allow attackers to escalate privileges and access the admin panel. The linked sources across CVE registries (NVD, RH/Red Hat, CNVD, CNVD equivalents, CVE lists) corroborate that the ...

9.8CVSS9.7AI score0.01307EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/02 12:00 a.m.•7 views

CVE-2022-25045: Use of Hard-coded Credentials

Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel...

9.8CVSS8.2AI score0.01307EPSS
SaveExploits1References2
OSV
OSV
•added 2022/02/18 6:15 p.m.•20 views

CVE-2020-8242

Unsanitized user input in ExpressionEngine = 5.4.0 control panel member creation leads to an SQL injection. The user needs member creation/admin control panel access to execute the attack...

7.2CVSS8AI score
SaveExploits0References1
NVD
NVD
•added 2022/02/11 4:15 p.m.•29 views

CVE-2020-36062

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS0.02349EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/02/11 4:15 p.m.•10 views

CVE-2020-36062

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS5.4AI score0.02349EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/02/11 12:00 a.m.•19 views

PHPGurukul Dairy Farm Shop Management System 信任管理问题漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . A hard-coded vulnerability exists in the Dairy Farm Shop Management System, which stems from hard-coded credentials in the code that can be exploited by an attacker to access the control panel...

9.8CVSS5.7AI score0.02349EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/02/11 12:00 a.m.•20 views

PT-2022-8946 · Unknown · Dairy Farm Shop Management System

Name of the Vulnerable Software and Affected Versions: Dairy Farm Shop Management System version 1.0 Description: The issue concerns hardcoded credentials in the source code, allowing attackers to access the control panel if compromised. Recommendations: For Dairy Farm Shop Management System...

9.8CVSS9.3AI score0.02349EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•6 views

CVE-2020-36062: Use of Hard-coded Credentials

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS8.2AI score0.02349EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/31 1:15 p.m.•8 views

CVE-2020-36064

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS5.4AI score0.01451EPSS
SaveExploits0References5
OSV
OSV
•added 2022/01/31 1:15 p.m.•14 views

CVE-2020-36064

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS7.4AI score0.01451EPSS
SaveExploits0References4
Prion
Prion
•added 2022/01/31 1:15 p.m.•28 views

Hardcoded credentials

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

5CVSS9.5AI score0.01451EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2022/01/31 12:43 p.m.•40 views

CVE-2020-36064

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.6AI score0.01451EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/01/31 12:00 a.m.•19 views

Online Course Registration 信任管理问题漏洞

Online Course Registration is a PHP and MySQL based online course registration system from the PHPGurukul Phpgurukul team. A trust management issue vulnerability exists in Online Course Registration, which stems from hard-coded certificates included in the product source code, and can be exploite...

9.8CVSS8.2AI score0.01451EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/31 12:00 a.m.•6 views

CVE-2020-36064: Use of Hard-coded Credentials

Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised...

9.8CVSS8.2AI score0.01451EPSS
SaveExploits0References2
OSV
OSV
•added 2022/01/10 2:10 p.m.•19 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References4
NVD
NVD
•added 2022/01/10 2:10 p.m.•39 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS0.02761EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2022/01/09 6:57 p.m.•43 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

10AI score0.02761EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/09 12:00 a.m.•4 views

CVE-2021-45334: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/28 4:15 p.m.•18 views

CVE-2021-45814

Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account...

9.8CVSS7.4AI score0.06339EPSS
SaveExploits4References3
OSV
OSV
•added 2021/11/03 8:15 p.m.•13 views

CVE-2021-43032

In XenForo through 2.2.7, a threat actor with access to the admin panel can create a new Advertisement via the Advertising function, and save an XSS payload in the body of the HTML document. This payload will execute globally on the client side...

4.8CVSS5.8AI score0.0091EPSS
SaveExploits2References2
Rows per page
Query Builder