Lucene search
+L

1162 matches found

OSV
OSV
•added 2023/12/21 9:15 p.m.•17 views

CVE-2023-48720

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00671EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/21 12:00 a.m.•20 views

PT-2023-30924 · Unknown · Student Result Management System

Name of the Vulnerable Software and Affected Versions: Student Result Management System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The password parameter of the "login.php" resource does not validate the characters received, and they are se...

9.8CVSS9.6AI score0.00671EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/21 12:00 a.m.•12 views

Projectworlds Student Result Management System SQL Injection Vulnerability

Projectworlds Student Result Management System is a student result management system from Projectworlds India. Projectworlds Student Result Management System v1.0 suffers from a SQL injection vulnerability, which arises when the "password" parameter of login.php does not validate the received...

9.8CVSS7.9AI score0.00671EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•4 views

CVE-2023-48720: Improper Neutralization of Special Elements used in an SQL Command

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/27 12:00 a.m.•14 views

Tenda AX1803 Security Vulnerability

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in the Tenda AX1803 v.1.0.0.1, which originates from an arbitrary code execution vulnerability in the adslPwd parameter of the formfastsettinginternetset function...

9.8CVSS8AI score0.01523EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/11/04 11:15 p.m.•27 views

CVE-2023-46963

An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...

5.3CVSS5.8AI score0.00525EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/04 11:15 p.m.•18 views

CVE-2023-46963

An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...

5.3CVSS5.8AI score0.00525EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/11/04 12:00 a.m.•13 views

Yunfan Learning Examination System Security Vulnerability

Yunfan Learning Examination System is an examination application from the Chinese company Yunfan. A security vulnerability exists in Yunfan Learning Examination System version v.6.5, which originated from a vulnerability that allows remote attackers to obtain sensitive information via the passwor...

5.3CVSS6.6AI score0.00525EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/04 12:00 a.m.•3 views

CVE-2023-46963: Improper Authentication

An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...

5.3CVSS6AI score0.00525EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/04 12:00 a.m.•40 views

CVE-2023-46963

An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function...

5.5AI score0.00525EPSS
SaveExploits1References1
OSV
OSV
•added 2023/11/02 2:15 p.m.•17 views

CVE-2023-45336

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/11/02 12:00 a.m.•16 views

PT-2023-29503 · Unknown · Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: Online Food Ordering System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the password parameter of the "routers/add-users.php" resource does not validate the characters...

7.7AI score
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/02 12:00 a.m.•3 views

CVE-2023-45336: Improper Neutralization of Special Elements used in an SQL Command

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the routers/router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.007EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/02 12:00 a.m.•14 views

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Food Ordering System v1.0, which stems from an insufficiently filtered password parameter on the routers/router.php page, resulting in an SQL...

9.8CVSS8.1AI score0.007EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/31 2:15 p.m.•17 views

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

9.8CVSS5.8AI score0.08655EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/31 2:15 p.m.•12 views

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

9.8CVSS5.8AI score0.08655EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/31 2:15 p.m.•23 views

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

9.8CVSS9.8AI score0.08655EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/10/31 12:00 a.m.•40 views

CVE-2023-46977

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

10AI score0.08655EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/31 12:00 a.m.•1 views

CVE-2023-46977: Out-of-bounds Write

TOTOLINK LR1200GB V9.1.0u.6619B20230130 was discovered to contain a stack overflow via the password parameter in the function loginAuth...

9.8CVSS8.2AI score0.08655EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/10/31 12:00 a.m.•20 views

PT-2023-30278 · Totolink · Totolink Lr1200Gb

Name of the Vulnerable Software and Affected Versions: TOTOLINK LR1200GB version 9.1.0u.6619 B20230130 Description: A stack overflow issue was discovered via the password parameter in the loginAuth function. This issue can be exploited, potentially allowing unauthorized access. Recommendations: F...

9.8CVSS7.4AI score0.08655EPSS
SaveExploits1References4
Rows per page
Query Builder