Lucene search
+L

5746 matches found

CNNVD
CNNVD
added 2025/01/09 12:0 a.m.8 views

Code-Projects Content Management System 代码问题漏洞

Code-Projects Content Management System is an open source content and management system from Code-Projects. A code issue exists in Code-Projects Content Management System version 1.0 due to an unrestricted upload of the parameter image...

7.2CVSS5.2AI score0.00552EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/09 12:0 a.m.11 views

PT-2025-3841 · Unknown · Code-Projects Hotel Management System

Name of the Vulnerable Software and Affected Versions: code-projects Content Management System version 1.0 Description: A critical issue has been found in the code-projects Content Management System. It affects an unknown part of the file /admin/publishnews.php of the component Publish News Page...

7.2CVSS5.1AI score0.00552EPSS
SaveExploits1References9
NVD
NVD
added 2025/01/08 9:15 p.m.11 views

CVE-2024-12431

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

4.3CVSS0.0043EPSS
SaveExploits1References3
OSV
OSV
added 2025/01/08 9:15 p.m.6 views

UBUNTU-CVE-2024-12431

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

4.3CVSS5.8AI score0.0043EPSS
SaveExploits1References5
CVE
CVE
added 2025/01/08 8:30 p.m.389 views

CVE-2024-12431

Summary: CVE-2024-12431 concerns GitLab CE/EE where unauthorized users could manipulate the status of issues in public projects. The flaw affects all versions starting from 15.5 up to, but not including, specific patched builds: 17.5.5 for the 15.5 line, 17.6.3 for the 17.6 line, and 17.7.1 for t...

4.3CVSS4.4AI score0.0043EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/01/08 8:30 p.m.41 views

CVE-2024-12431 Missing Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

4.3CVSS0.0043EPSS
SaveExploits1References3
Debian CVE
Debian CVE
added 2025/01/08 8:30 p.m.69 views

CVE-2024-12431

Removed by vendor...

4.3CVSS5.8AI score0.0043EPSS
SaveExploits1
OSV
OSV
added 2025/01/08 8:30 p.m.14 views

CVE-2024-12431 Missing Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

4.3CVSS6.5AI score
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2025/01/08 8:30 p.m.12 views

CVE-2024-12431 Missing Authorization in GitLab

An issue was discovered in GitLab CE/EE affecting all versions starting from 15.5 before 17.5.5, 17.6 before 17.6.3, and 17.7 before 17.7.1, in which unauthorized users could manipulate the status of issues in public projects...

4.3CVSS4.3AI score0.0043EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/01/08 12:0 a.m.33 views

GitLab CE/EE 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab CE/EE, which stems from the ability of...

4.3CVSS6.4AI score0.0043EPSS
SaveExploits1References4
NVD
NVD
added 2025/01/07 5:15 p.m.41 views

CVE-2025-0300

A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been...

8.8CVSS0.00545EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/01/07 4:31 p.m.44 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS0.0058EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/01/07 4:31 p.m.14 views

CVE-2025-0299 code-projects Online Book Shop search_result.php sql injection

A vulnerability classified as critical has been found in code-projects Online Book Shop 1.0. Affected is an unknown function of the file /searchresult.php. The manipulation of the argument s leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

6.5CVSS7.4AI score0.0058EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/01/07 4:0 p.m.26 views

CVE-2025-0298 code-projects Online Book Shop process_login.php sql injection

A vulnerability was found in code-projects Online Book Shop 1.0. It has been rated as critical. This issue affects some unknown processing of the file /processlogin.php. The manipulation of the argument usernm leads to sql injection. The attack may be initiated remotely. The exploit has been...

6.5CVSS0.00906EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.18 views

PT-2025-3817 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A critical issue has been found in the code-projects Online Book Shop, affecting unknown code in the /detail.php file. The manipulation of the id argument leads to SQL injection. This...

6.5CVSS6.8AI score0.00653EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.10 views

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability in the id parameter of the /detail.php page...

6.5CVSS7AI score0.00653EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/01/07 12:0 a.m.12 views

PT-2025-3815 · Unknown · Code-Projects Online Book Shop

Name of the Vulnerable Software and Affected Versions: code-projects Online Book Shop version 1.0 Description: A problem was found in the file /booklist.php?subcatid=1, where the manipulation of the subcatnm argument leads to cross site scripting. The attack may be launched remotely...

5.3CVSS3.5AI score0.00465EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.5 views

Code-Projects Online Book Shop 安全漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A security vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from an SQL injection vulnerability in the usernm parameter of the /processlogin.php page...

9.8CVSS7AI score0.00906EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.8 views

Code-Projects Online Book Shop SQL注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. A SQL injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which originates from a SQL injection vulnerability contained in the subcatid parameter of the /booklist.php page...

9.8CVSS7AI score0.00689EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/01/07 12:0 a.m.8 views

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is a Code-Projects open source online bookstore. An injection vulnerability exists in Code-Projects Online Book Shop version 1.0, which stems from an SQL injection vulnerability in the cat parameter of the /subcat.php page...

8.8CVSS7AI score0.00545EPSS
SaveExploits1References6
Rows per page
Query Builder