Lucene search
+L

86 matches found

Cvelist
Cvelist
added 2024/04/26 12:0 a.m.25 views

CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

8.1AI score0.0079EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/04/26 12:0 a.m.8 views

PT-2024-22392 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: The issue allows attackers to run arbitrary SQL commands via the event id parameter in a crafted POST request to the "/event-management-master/backend/register.php" API endpoint. This...

9.8CVSS7.2AI score0.0079EPSS
SaveExploits1References8
CVE
CVE
added 2024/04/26 12:0 a.m.67 views

CVE-2024-28322

CVE-2024-28322 affects PuneethReddyHC Event Management 1.0. Affected component: the /event-management-master/backend/register.php endpoint, vulnerable via the event_id parameter in a crafted POST request, enabling SQL injection. Root cause: improper input handling leading to arbitrary SQL executi...

9.8CVSS8.2AI score0.0079EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2024/04/26 12:0 a.m.13 views

CVE-2024-28322

SQL Injection vulnerability in /event-management-master/backend/register.php in PuneethReddyHC Event Management 1.0 allows attackers to run arbitrary SQL commands via the eventid parameter in a crafted POST request...

8.2AI score0.0079EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/04/26 12:0 a.m.9 views

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from the...

9.8CVSS8.1AI score0.0079EPSS
SaveExploits1References3
NVD
NVD
added 2024/04/07 11:15 p.m.15 views

CVE-2024-3433

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

5.4CVSS3.7AI score0.0055EPSS
SaveExploits1References4
NVD
NVD
added 2024/04/07 11:15 p.m.25 views

CVE-2024-3432

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

8.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/04/07 11:0 p.m.12 views

CVE-2024-3433 PuneethReddyHC Event Management register.php cross site scripting

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

4CVSS6.2AI score0.0055EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/04/07 11:0 p.m.28 views

CVE-2024-3433 PuneethReddyHC Event Management register.php cross site scripting

A vulnerability classified as problematic has been found in PuneethReddyHC Event Management 1.0. Affected is an unknown function of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to cross site scripting. It is possible to launch...

4CVSS4.1AI score0.0055EPSS
SaveExploits1References4
CVE
CVE
added 2024/04/07 11:0 p.m.58 views

CVE-2024-3433

CVE-2024-3433 affects PuneethReddyHC Event Management 1.0. Affected is an unknown function in the file /backend/register.php where manipulation of the parameters event_id, full_name, email, mobile, college, or branch yields cross-site scripting. Exploitation could be performed remotely. The vulne...

5.4CVSS3.7AI score0.0055EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2024/04/07 10:31 p.m.71 views

CVE-2024-3432

CVE-2024-3432 affects PuneethReddyHC Event Management 1.0. The vulnerability is a SQL injection in the backend/register.php processing of parameters event_id/full_name/email/mobile/college/branch, exploitable remotely. Multiple sources confirm the issue and that the exploit has been disclosed pub...

8.8CVSS5.9AI score0.0064EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2024/04/07 10:31 p.m.31 views

CVE-2024-3432 PuneethReddyHC Event Management register.php sql injection

A vulnerability was found in PuneethReddyHC Event Management 1.0. It has been rated as critical. This issue affects some unknown processing of the file /backend/register.php. The manipulation of the argument eventid/fullname/email/mobile/college/branch leads to sql injection. The attack may be...

6.5CVSS6.2AI score0.0064EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.7 views

PT-2024-25788 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A critical issue affects the processing of the file /backend/register.php, where the manipulation of the arguments event id, full name, email, mobile, college, or branch leads to sql...

8.8CVSS5.7AI score0.0064EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.6 views

PT-2024-25790 · Unknown · Puneethreddyhc Event Management

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Event Management version 1.0 Description: A problematic vulnerability has been found in the software. The issue affects an unknown function of the file /backend/register.php. The manipulation of the arguments event id, full nam...

5.4CVSS3.8AI score0.0055EPSS
SaveExploits1References7
VulnCheck KEV
VulnCheck KEV
added 2024/01/22 12:0 a.m.4 views

VulnCheck KEV: CVE-2021-41649

An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php catid parameter. Using a post request does not sanitize the user input...

9.8CVSS7.4AI score0.5177EPSS
SaveExploits2References1
OSV
OSV
added 2023/06/20 12:15 p.m.9 views

CVE-2023-3337

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

9.8CVSS5.4AI score0.00693EPSS
SaveExploits0References2
Prion
Prion
added 2023/06/20 12:15 p.m.18 views

Authentication flaw

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.4AI score0.00693EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2023/06/20 12:0 p.m.34 views

CVE-2023-3337 PuneethReddyHC Online Shopping System Advanced Admin Registration reg.php improper authentication

A vulnerability was found in PuneethReddyHC Online Shopping System Advanced 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/reg.php of the component Admin Registration. The manipulation leads to improper authentication. The atta...

7.5CVSS9.7AI score0.00693EPSS
SaveExploits0References2
CVE
CVE
added 2023/06/20 12:0 p.m.63 views

CVE-2023-3337

CVE-2023-3337 affects PuneethReddyHC Online Shopping System Advanced 1.0. Affected component: the Admin Registration function in the file /admin/reg.php, where manipulation leads to improper authentication. The vulnerability is described as exploitable remotely. Multiple connected sources corrobo...

9.8CVSS8.6AI score0.00693EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/20 12:0 a.m.8 views

PT-2023-24318 · Unknown · Puneethreddyhc Online Shopping System

Name of the Vulnerable Software and Affected Versions: PuneethReddyHC Online Shopping System Advanced version 1.0 Description: A critical issue affects an unknown functionality of the file /admin/reg.php in the Admin Registration component, leading to improper authentication. This can be exploite...

9.8CVSS7.5AI score0.00693EPSS
SaveExploits0References4
Rows per page
Query Builder