Lucene search
K

2828 matches found

CNNVD
CNNVD
added 2024/02/06 12:0 a.m.3 views

SolarWinds Platform SQL Injection Vulnerability

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. SolarWinds Platform suffers from a SQL injection vulnerability. An attacker could exploit the vulnerability to remotely execute code...

8CVSS8AI score0.01536EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.4 views

Login System with Email Verification Security Vulnerability

Login System with Email Verification is an email verification login system by rems Personal Developer. A security vulnerability exists in Login System with Email Verification version 1.0, which is caused by an SQL injection vulnerability in the user parameter...

7.2CVSS8AI score0.01155EPSS
Exploits3References2
CNNVD
CNNVD
added 2024/01/26 12:0 a.m.3 views

Novel-Plus SQL Injection Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. An SQL injection vulnerability exists in Novel-Plus version 4.3.0-RC1, which stems from the fact that incorrect manipulation of the parameter sort can lead to sql injection...

9.8CVSS8.4AI score0.00677EPSS
Exploits1References4
OSV
OSV
added 2024/01/25 7:15 p.m.1 views

CVE-2024-0883

A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been declared as critical. This vulnerability affects the function prepare of the file admin/pay.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.8AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.3 views

PT-2024-15889 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue affects the function exec of the file payment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

9.8CVSS7.5AI score0.00634EPSS
Exploits1References7
GithubExploit
GithubExploit
added 2024/01/21 9:45 p.m.37 views

Exploit for SQL Injection in Remyandrade Daily_Habit_Tracker

CVE-2024-24140: Daily Habit Tracker App SQL Inj...

7.2CVSS8.1AI score0.01159EPSS
Exploits3
OSV
OSV
added 2024/01/19 10:15 a.m.1 views

CVE-2024-0705

The Stripe Payment Plugin for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 3.7.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

7.5CVSS7.3AI score0.02657EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.3 views

PrestaShop Security Breach

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image zoom. A security vulnerability exists in PrestaShop, which originates from an SQL injection vulnerability in the...

9.8CVSS8.1AI score0.00518EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.4 views

Supplier Management System Security Vulnerability

Supplier Management System is a supplier management system. A security vulnerability exists in Campcodes Supplier Management System v1.0, which originates from a SQL injection vulnerability in the file editretailer.php...

7.2CVSS7.9AI score0.00707EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.4 views

WordPress plugin Contact Form by WD security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

7.2CVSS7.3AI score0.00741EPSS
Exploits2References2
CNNVD
CNNVD
added 2024/01/16 12:0 a.m.3 views

WordPress plugin ArtPlacer Widget security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. The WordPress plugin ArtPlacer Widget versi...

8.8CVSS6.7AI score0.00415EPSS
Exploits2References2
Positive Technologies
Positive Technologies
added 2024/01/13 12:0 a.m.3 views

PT-2024-15604 · Code Projects · Code-Projects Fighting Cock Information System

Name of the Vulnerable Software and Affected Versions: code-projects Fighting Cock Information System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /admin/action/delete-vaccine.php. The manipulation of the ref argument leads to...

9.8CVSS7.6AI score0.005EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/01/13 12:0 a.m.3 views

PT-2024-15597 · Taokeyun · Taokeyun

Name of the Vulnerable Software and Affected Versions: Taokeyun versions up to 1.0.5 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the function index of the file application/index/controller/m/Drs.php. The manipulation of the cid argument...

9.8CVSS7.7AI score0.00792EPSS
Exploits2References8
Positive Technologies
Positive Technologies
added 2024/01/13 12:0 a.m.2 views

PT-2024-15610 · Unknown · Kashipara Billing

Name of the Vulnerable Software and Affected Versions: Kashipara Billing Software version 1.0 Description: A critical issue has been found in the HTTP POST Request Handler component, specifically in the file submit delivery list.php. The manipulation of the customer details argument leads to sql...

9.8CVSS7.6AI score0.00535EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.3 views

Judging Management System security breach

Judging Management System is a review management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from a SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensitive...

9.8CVSS8.5AI score0.01024EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/12 12:0 a.m.4 views

Judging Management System security breach

Judging Management System is a judging management system by Carlo Montero Personal Developer. A security vulnerability exists in Sourcecodester Judging Management System v1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary code and obtain sensiti...

9.8CVSS8.5AI score0.01024EPSS
Exploits1References2
OSV
OSV
added 2024/01/07 3:15 p.m.2 views

CVE-2024-0280

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file itemtypesubmit.php. The manipulation of the argument typename leads to sql injection. The attack can be launched remotely...

6.5CVSS5.7AI score0.00565EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/01/05 12:0 a.m.5 views

PT-2024-15409 · Unknown · Codeastro Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Online Food Ordering System version 1.0 Description: A critical vulnerability was found in the Admin Panel component of the CodeAstro Online Food Ordering System. The manipulation of the Username argument leads to SQL injection. The...

9.8CVSS7.8AI score0.00779EPSS
Exploits1References8
OSV
OSV
added 2024/01/04 2:15 p.m.3 views

CVE-2023-49624

Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'cancelid' parameter of the materialbill.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00672EPSS
Exploits1References2
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.3 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A security vulnerability exists in the v1.0 version of Kashipara Billing Software, which stems from the unfiltered processing of the cancelid parameter on the materialbill.php page before sending the data to the database for...

9.8CVSS6.8AI score0.00672EPSS
Exploits1References3
Rows per page
Query Builder