Lucene search
+L

807 matches found

CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•15 views

Projectworlds Online Book Store Project In Php 跨站请求伪造漏洞

Projectworlds Online Book Store Project In Php is a Php-based online bookstore system from the Austrian company Projectworlds. A security vulnerability exists in Projectworlds Online Book Store Project In Php version 1.0, which can be exploited by an attacker to delete any book from the system...

6.5CVSS5.6AI score0.00527EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•7 views

CVE-2021-43630: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in addpatient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web...

8.8CVSS6.3AI score0.02003EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•6 views

CVE-2021-43629: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in adminhome.php...

9.8CVSS5.7AI score0.0113EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•6 views

CVE-2021-43158: Cross-Site Request Forgery (CSRF)

In ProjectWorlds Online Shopping System PHP 1.0, a CSRF vulnerability in cartremove.php allows a remote attacker to remove any product in the customer's cart...

4.3CVSS5.9AI score0.00454EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•16 views

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. v1.0 of Projectworlds Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers to Execute illegal SQL commands to steal sensitive database data...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•13 views

Projectworlds Online Shopping System SQL注入漏洞

Projectworlds Online Shopping System is an online shopping system from Projectworlds Austria. v1.0 of ProjectWorlds Online Shopping System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0113EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•13 views

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria.Projectworlds Hospital Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

9.8CVSS6AI score0.0113EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•5 views

CVE-2021-43631: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointmentno parameter in payment.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•4 views

CVE-2021-43628: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/07/09 12:00 a.m.•43 views

ProjectWorlds College Management System Cross-Site Request Forgery Vulnerability

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

6.5CVSS3.2AI score0.00781EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/07/09 12:00 a.m.•23 views

Projectworlds Online Examination System Cross-Site Request Forgery Vulnerability

Projectworlds Online Examination System is an online examination system. projectworlds Online Examination System cross-site request forgery vulnerability, which can be exploited by attackers to delete existing users...

6.5CVSS3.9AI score0.00658EPSS
SaveExploits0References1
OSV
OSV
•added 2021/05/24 1:15 p.m.•13 views

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

6.5CVSS6.7AI score0.00781EPSS
SaveExploits0References2
Prion
Prion
•added 2021/05/24 1:15 p.m.•26 views

Cross site request forgery (csrf)

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

4.3CVSS6.5AI score0.00781EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/05/24 12:45 p.m.•47 views

CVE-2020-25408

CVE-2020-25408 affects ProjectWorlds College Management System Php 1.0. The CSRF vulnerability allows a remote attacker to modify, delete, or create new entries for student, faculty, teacher, subject, scores, location, and article data. The connected records confirm the CSRF issue across multiple...

6.5CVSS6.5AI score0.00781EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/05/24 12:45 p.m.•35 views

CVE-2020-25408

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

6.6AI score0.00781EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/05/24 12:40 p.m.•34 views

CVE-2020-25411

Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user...

6.5AI score0.00658EPSS
SaveExploits0References2
CVE
CVE
•added 2021/05/24 12:40 p.m.•51 views

CVE-2020-25411

CVE-2020-25411 : Projectworlds Online Examination System 1.0 is vulnerable to Cross-Site Request Forgery (CSRF) , allowing a remote attacker to delete an existing user. Connected documents corroborate the CSRF root cause and the impact as user deletion. No concrete technical details (endpoints, p...

6.5CVSS6.4AI score0.00658EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2021/05/24 12:00 a.m.•11 views

Projectsworlds College Management System 跨站请求伪造漏洞

ProjectWorlds College Management System is a college management system. projectWorlds College Management System is vulnerable to cross-site request forgery, which can be exploited by attackers to modify, delete student, faculty, teacher, subject, grade, location, and article data or create new...

6.5CVSS6.3AI score0.00781EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•7 views

CVE-2020-25408: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data...

6.5CVSS5.9AI score0.00781EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/24 12:00 a.m.•12 views

Projectsworlds College Management System SQL注入漏洞

Projectsworlds College Management System is a college management system. projectWorlds College Management System Php version 1.0 is vulnerable to SQL injection, which can be exploited by attackers to execute SQL statements to obtain sensitive database information...

9.8CVSS8.7AI score0.01605EPSS
SaveExploits0References2
Rows per page
Query Builder