Lucene search
+L

807 matches found

CNVD
CNVD
•added 2022/07/15 12:00 a.m.•51 views

Projectworlds Online Hotel Booking System SQL Injection Vulnerability

Projectworlds Online Hotel Booking System is a hotel online booking system from Projectworlds. A SQL injection vulnerability exists in Online Hotel Booking System version 1.0. An attacker can exploit this vulnerability to perform a sql injection attack...

7.2CVSS7.2AI score0.00827EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•14 views

Projectworlds Online Hotel Booking System SQL注入漏洞

Projectworlds Online Hotel Booking System is a hotel online booking system from Projectworlds. A SQL injection vulnerability exists in Online Hotel Booking System version 1.0. An attacker can exploit this vulnerability to perform a sql injection attack...

7.2CVSS5.9AI score0.00827EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/12 12:00 a.m.•10 views

Projectworlds Online Hotel Booking System SQL注入漏洞

Projectworlds Online Hotel Booking System is a hotel online booking system from Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Hotel Booking System version 1.0. The vulnerability stems from a lack of validation of the roomname parameter against an externally entered S...

7.2CVSS5.9AI score0.00827EPSS
SaveExploits1References3
OSV
OSV
•added 2022/06/02 2:15 p.m.•15 views

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

9.8CVSS5.9AI score0.02173EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/06/02 2:15 p.m.•9 views

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

9.8CVSS7.4AI score0.02173EPSS
SaveExploits1References5
NVD
NVD
•added 2022/06/02 2:15 p.m.•36 views

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

9.8CVSS0.02173EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/02 2:15 p.m.•24 views

Sql injection

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

7.5CVSS9.5AI score0.02173EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/05/31 11:38 p.m.•51 views

CVE-2021-44095

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

9.8AI score0.02173EPSS
SaveExploits1References3
CVE
CVE
•added 2022/05/31 11:38 p.m.•80 views

CVE-2021-44095

Affected software: ProjectWorlds Hospital Management System (PHP 1.0) — vulnerable on the login page. Issue: SQL injection leading to potential compromise of the application’s SQL database. Root cause: unsafely constructed SQL queries on login input (per CVE description). Impact (per sources): re...

9.8CVSS9.6AI score0.02173EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/31 12:00 a.m.•8 views

CVE-2021-44095: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in ProjectWorlds Hospital Management System in php 1.0 on login page that allows a remote attacker to compromise Application SQL database...

9.8CVSS8.3AI score0.02173EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/03/17 12:00 a.m.•51 views

Projectworlds Hospital Management System Privilege Error Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. Projectworlds Hospital Management System version 1.0 is vulnerable to a privilege error that could be exploited by an unauthorized attacker to add unlimited patients via addppatient.php...

5CVSS5AI score0.00684EPSS
SaveExploits1Affected Software1
attackerkb
attackerkb
•added 2022/03/16 10:15 a.m.•13 views

CVE-2021-45852

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

5.3CVSS6.1AI score0.00684EPSS
SaveExploits1References2
Prion
Prion
•added 2022/03/16 10:15 a.m.•29 views

Design/Logic Flaw

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

5CVSS5.3AI score0.00684EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2022/03/16 9:37 a.m.•103 views

CVE-2021-45852

Projectworlds Hospital Management System v1.0 contains a privilege error allowing an unauthorized attacker to add patients without restriction via add_patient.php (and related add_ppatient.php in some references). The core issue is improper authorization for patient creation, enabling unlimited e...

5.3CVSS5.2AI score0.00684EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/16 12:00 a.m.•6 views

CVE-2021-45852: Always-Incorrect Control Flow Implementation

An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via addpatient.php...

5.3CVSS6AI score0.00684EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/03/16 12:00 a.m.•15 views

Projectworlds Hospital Management System 安全漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. Projectworlds Hospital Management System version 1.0 is vulnerable to a privilege error that could be exploited by an unauthorized attacker to add unlimited patients via addppatient.php...

5.3CVSS5.5AI score0.00684EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/23 5:15 p.m.•13 views

CVE-2021-46024

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...

9.8CVSS8.1AI score0.00968EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/23 5:15 p.m.•24 views

CVE-2021-46024

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...

9.8CVSS0.00968EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/23 4:18 p.m.•68 views

CVE-2021-46024

CVE-2021-46024 affects the projectworlds online-shopping-webvsite-in-php 1.0, with a SQL Injection vulnerability in cart_add.php through the id parameter. No login is required, indicating unauthenticated database access potential via the vulnerable parameter. Root cause: lack of input validation/...

9.8CVSS9.7AI score0.00968EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/01/23 4:18 p.m.•32 views

CVE-2021-46024

Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cartadd.php, No login is required...

10AI score0.00968EPSS
SaveExploits1References1
Rows per page
Query Builder