Lucene search
+L

426 matches found

NVD
NVD
•added 2023/04/07 5:15 p.m.•40 views

CVE-2023-1909

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible ...

6.5CVSS5.7AI score0.00625EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/07 5:15 p.m.•31 views

Sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible ...

5.8CVSS7AI score0.00625EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/04/07 12:00 a.m.•19 views

PT-2023-17331 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue was found in the User Profile Update Handler component, specifically in the file profile.php. The manipulation of the name and mobno arguments leads to SQL...

6.5CVSS5.7AI score0.00625EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/07 12:00 a.m.•8 views

CVE-2023-1909: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul BP Monitoring Management System 1.0. Affected is an unknown function of the file profile.php of the component User Profile Update Handler. The manipulation of the argument name/mobno leads to sql injection. It is possible ...

6.5CVSS5.5AI score0.00625EPSS
SaveExploits1References2
OSV
OSV
•added 2023/03/23 1:15 a.m.•17 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8CVSS5.8AI score0.01023EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/23 1:15 a.m.•24 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8CVSS9.8AI score0.01023EPSS
SaveExploits1References3
Prion
Prion
•added 2023/03/23 1:15 a.m.•19 views

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

7.5CVSS9.7AI score0.01023EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/03/23 12:00 a.m.•13 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a simple customer relationship management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Simple Customer Relationship Management System v1.0, which can be exploited to perform SQL injection via the name...

9.8CVSS8.7AI score0.01023EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2023/03/23 12:00 a.m.•13 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8AI score0.01023EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/03/23 12:00 a.m.•15 views

PT-2023-19728 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: A SQL injection issue was found in the Profile Update function, specifically via the name parameter. Recommendations: For Simple Customer Relationship Management System...

9.8CVSS9.7AI score0.01023EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/23 12:00 a.m.•1 views

CVE-2023-24655: Improper Neutralization of Special Elements used in an SQL Command

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

9.8CVSS5.8AI score0.01023EPSS
SaveExploits1References2
CVE
CVE
•added 2023/03/23 12:00 a.m.•67 views

CVE-2023-24655

CVE-2023-24655 affects Simple Customer Relationship Management System v1.0. A SQL injection flaw exists in the Profile Update function via the name parameter, enabling potentially arbitrary SQL execution. The CVSS 3.1 vector indicates a network attack with no user interaction and requires no priv...

9.8CVSS9.7AI score0.01023EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/03/23 12:00 a.m.•39 views

CVE-2023-24655

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function...

10AI score0.01023EPSS
SaveExploits1References3
OSV
OSV
•added 2023/03/15 2:15 p.m.•16 views

CVE-2023-24730

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function...

8.8CVSS7.3AI score0.01049EPSS
SaveExploits1References3
OSV
OSV
•added 2023/03/15 2:15 p.m.•18 views

CVE-2023-24728

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function...

8.8CVSS7.3AI score0.01006EPSS
SaveExploits1References3
OSV
OSV
•added 2023/03/15 2:15 p.m.•13 views

CVE-2023-24732

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

8.8CVSS5.8AI score0.01006EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/15 2:15 p.m.•29 views

CVE-2023-24731

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

8.8CVSS8.9AI score0.01006EPSS
SaveExploits1References3
NVD
NVD
•added 2023/03/15 2:15 p.m.•25 views

CVE-2023-24732

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function...

8.8CVSS8.9AI score0.01006EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/03/15 12:00 a.m.•15 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which originates from a SQL injection vulnerability in the gender...

8.8CVSS8.2AI score0.01006EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2023/03/15 12:00 a.m.•35 views

CVE-2023-24731

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function...

9.1AI score0.01006EPSS
SaveExploits1References3
Rows per page
Query Builder