Lucene search
K

6 matches found

CNVD
CNVD
added 2024/01/11 12:0 a.m.3 views

Kashipara Food Management System Cross-Site Scripting Vulnerability (CNVD-2024-13476)

Kashipara Food Management System is a food management system from Kashipara. A cross-site scripting vulnerability exists in version 1.0 of the Kashipara Food Management System, which stems from the lack of effective filtering and escaping of user-supplied data in the partyaddress parameter of the...

6.1CVSS6AI score0.0007EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/01/07 12:0 a.m.1 views

PT-2024-15444 · Unknown · Kashipara Food Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Food Management System version 1.0 Description: A vulnerability was found in the processing of the file party submit.php, where the manipulation of the party address argument leads to cross-site scripting. The attack may be initiate...

6.1CVSS6.6AI score0.0007EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.4 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which is caused by the lack of validation of the partyname parameter of the partysubmit.php file against external SQL input, and can b...

6.5CVSS8.2AI score0.00046EPSS
Exploits1References4
OSV
OSV
added 2024/01/04 2:15 p.m.0 views

CVE-2023-49658

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'bankdetails' parameter of the partysubmit.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/04 12:0 a.m.4 views

PT-2024-13776 · Billing · Billing

Name of the Vulnerable Software and Affected Versions: Billing Software version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the bank details parameter of the "party submit.php" resource does not validate the characters received, and th...

9.8CVSS9.9AI score0.00072EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.1 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A SQL injection vulnerability exists in the v1.0 version of Kashipara Billing Software, which originates when the bankdetails parameter of the partysubmit.php page is processed without filtering the data and sending it to the...

9.8CVSS7.9AI score0.00072EPSS
Exploits1References3
Rows per page
Query Builder