Lucene search
+L

18 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/26 12:00 a.m.•3 views

CVE-2025-56605: Improper Neutralization of Input During Web Page Generation

A reflected Cross-Site Scripting XSS vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0. The mobile POST parameter is improperly validated and echoed back in the HTTP response without sanitization, allowing an attacker to inject and execute...

5.4CVSS6.2AI score0.00192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/23 12:00 a.m.•0 views

CVE-2025-65354: Improper Neutralization of Special Elements used in an SQL Command

Improper input handling in /Grocery/searchproductsitname.php inPuneethReddyHC event-management 1.0 permits SQL injection via the sitemname POST parameter. Crafted payloads can alter query logic and disclose database contents. Exploitation may result in sensitive data disclosure and backend...

9.8CVSS5.8AI score0.00518EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/07 12:00 a.m.•3 views

CVE-2025-56243: Improper Neutralization of Input During Web Page Generation

A Cross-Site Scripting XSS vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the eventid GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into th...

6.1CVSS6.2AI score0.00228EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-32020

Malicious code in bioql PyPI...

5.4CVSS4.8AI score0.0055EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/05/23 10:21 a.m.•17 views

CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

9.8CVSS8.3AI score0.0079EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:09 a.m.•13 views

CVE-2024-3432

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

8.8CVSS7.2AI score0.0064EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•4 views

CVE-2024-28322: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

9.8CVSS6AI score0.0079EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•36 views

CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

8.1AI score0.0079EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•18 views

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from the...

9.8CVSS8.1AI score0.0079EPSS
SaveExploits1References3
NVD
NVD
•added 2024/04/07 11:15 p.m.•23 views

CVE-2024-3433

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

5.4CVSS3.7AI score0.0055EPSS
SaveExploits1References4
NVD
NVD
•added 2024/04/07 11:15 p.m.•30 views

CVE-2024-3432

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

8.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2024/04/07 11:00 p.m.•15 views

CVE-2024-3433 PuneethReddyHC Event Management register.php cross site scripting

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

4CVSS6.2AI score0.0055EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/04/07 10:31 p.m.•44 views

CVE-2024-3432 PuneethReddyHC Event Management register.php sql injection

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

6.5CVSS6.2AI score0.0064EPSS
SaveExploits1References3
CVE
CVE
•added 2024/04/07 10:31 p.m.•94 views

CVE-2024-3432

CVE-2024-3432 affects PuneethReddyHC Event Management 1.0. The vulnerability is a SQL injection in the backend/register.php processing of parameters event_id/full_name/email/mobile/college/branch, exploitable remotely. Multiple sources confirm the issue and that the exploit has been disclosed pub...

8.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•3 views

CVE-2024-3432: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

8.8CVSS5.5AI score0.0064EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•13 views

PT-2024-25790 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file /backend/register.php. The manipulation of the arguments event id, full nam...

5.4CVSS3.8AI score0.0055EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•4 views

CVE-2024-3433: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

5.4CVSS4.1AI score0.0055EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/07 12:00 a.m.•15 views

PT-2024-25788 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A critical issue affects the processing of the file /backend/register.php, where the manipulation of the arguments event id, full name, email, mobile, college, or branch leads to sql...

8.8CVSS5.7AI score0.0064EPSS
SaveExploits1References6
Rows per page
Query Builder