Lucene search
+L

1215 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/09 12:00 a.m.•2 views

CVE-2023-2595: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Billing Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file ajaxservice.php of the component POST Parameter Handler. The manipulation of the argument dropservices leads to sql...

9.8CVSS5.5AI score0.00827EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/09 12:00 a.m.•21 views

PT-2023-20380 · Sourcecodester · Sourcecodester Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Billing Management System version 1.0 Description: A critical issue has been found in the SourceCodester Billing Management System, affecting an unknown functionality of the file ajax service.php of the component POST Parameter...

9.8CVSS7.6AI score0.00827EPSS
SaveExploits1References5
OSV
OSV
•added 2023/05/08 2:15 p.m.•10 views

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

9.8CVSS6.1AI score0.0084EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/05/08 12:00 a.m.•12 views

CVE-2020-23966

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

9.9AI score0.0084EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/05/08 12:00 a.m.•22 views

PT-2023-11657 · Unknown · Victor Cms

Name of the Vulnerable Software and Affected Versions: victor cms version 1.0 Description: The issue allows attackers to execute arbitrary commands via the post parameter to "/post.php" in a crafted GET request. This enables attackers to potentially access and manipulate sensitive data...

9.8CVSS7.7AI score0.0084EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/08 12:00 a.m.•3 views

CVE-2020-23966: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in victor cms 1.0 allows attackers to execute arbitrary commands via the post parameter to /post.php in a crafted GET request...

9.8CVSS6.4AI score0.0084EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/07 3:15 p.m.•25 views

Cross site scripting

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input...

4CVSS6.1AI score0.00549EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/07 12:00 a.m.•3 views

CVE-2023-2565: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complainttype with the input leads to...

6.1CVSS3.8AI score0.00549EPSS
SaveExploits1References3
Prion
Prion
•added 2023/05/06 1:15 a.m.•28 views

Sql injection

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

7.5CVSS7.9AI score0.00768EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2023/05/06 12:31 a.m.•34 views

CVE-2016-15031 PHP-Login POST Parameter class.loginscript.php checkLogin sql injection

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

7.5CVSS9.9AI score0.00768EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/06 12:00 a.m.•4 views

CVE-2016-15031: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHP-Login 1.0. It has been declared as critical. This vulnerability affects the function checkLogin of the file login/scripts/class.loginscript.php of the component POST Parameter Handler. The manipulation of the argument myusername leads to sql injection. The attack...

9.8CVSS5.3AI score0.00768EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/05/04 12:00 a.m.•64 views

CVE-2023-29842

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

9.3AI score0.01318EPSS
SaveExploits3References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•5 views

CVE-2023-29842: Improper Neutralization of Special Elements used in an SQL Command

ChurchCRM 4.5.4 endpoint /EditEventTypes.php is vulnerable to Blind SQL Injection Time-based via the ENtyid POST parameter...

8.8CVSS5.8AI score0.01318EPSS
SaveExploits3References3
Cvelist
Cvelist
•added 2023/04/22 4:31 p.m.•36 views

CVE-2023-2243 SourceCodester Complaint Management System POST Parameter registration.php sql injection

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

6.5CVSS9.1AI score0.00723EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/22 12:00 a.m.•3 views

CVE-2023-2243: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file users/registration.php of the component POST Parameter Handler. The manipulation of the argument fullname leads to sql injection...

8.8CVSS5.5AI score0.00723EPSS
SaveExploits1References2
OSV
OSV
•added 2023/04/18 2:15 p.m.•12 views

CVE-2023-2153

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

6.1CVSS3.8AI score0.00564EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/18 2:15 p.m.•29 views

Cross site scripting

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

4CVSS6AI score0.00564EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/18 2:00 p.m.•41 views

CVE-2023-2153 SourceCodester Complaint Management System POST Parameter editable_ajax.php cross site scripting

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

4CVSS6.2AI score0.00564EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/18 12:00 a.m.•2 views

CVE-2023-2153: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/assets/plugins/DataTables/examples/examplessupport/editableajax.php of the component POST Parameter Handler. The...

6.1CVSS3.8AI score0.00564EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/18 12:00 a.m.•17 views

PT-2023-18281 · Sourcecodester · Sourcecodester Complaint Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Complaint Management System version 1.0 Description: A problematic issue was found in the SourceCodester Complaint Management System, affecting some unknown functionality of the file...

6.1CVSS4.1AI score0.00564EPSS
SaveExploits1References5
Rows per page
Query Builder