Lucene search
K

2793 matches found

CNNVD
CNNVD
added 2025/06/17 12:0 a.m.4 views

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

8.8CVSS7AI score0.00335EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.3 views

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. An injection vulnerability exists in code-projects Restaurant Order System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /table.php...

8.8CVSS6.9AI score0.00342EPSS
Exploits1References7
CNVD
CNVD
added 2025/06/11 12:0 a.m.3 views

Online Fire Reporting System /reporting.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter fullname in the file /reporting.php. The vulnerability c...

9.8CVSS8.3AI score0.00387EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

Human Metapneumovirus Testing Management System /search-report-result.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

8.8CVSS8.3AI score0.00318EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

Complaint Management System /admin/edit-subcategory.php File SQL Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter subcategory in the file /admin/edit-subcategory.php. An attacker can...

8.8CVSS8.2AI score0.00318EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.3 views

Patient Record Management System urinalysis_form.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the urinalysisform.php file parameter urinalysisid. An attacker can...

8.8CVSS8.3AI score0.00361EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.2 views

Dairy Farm Shop Management System /add-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

9.8CVSS7.9AI score0.00534EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.5 views

Complaint Management System /user/register-complaint.ph File SQL Injection Vulnerability

Complaint Management System is a complaint management system. The Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter noc in the /user/register-complaint.ph file. An attacker can exploit...

8.8CVSS8.2AI score0.00361EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.3 views

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-321946)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
OSV
OSV
added 2025/06/10 8:15 p.m.4 views

CVE-2025-5977

A vulnerability was found in code-projects School Fees Payment System 1.0 and classified as critical. This issue affects some unknown processing of the file /datatable.php. The manipulation of the argument sSortDir0 leads to sql injection. The attack may be initiated remotely. The exploit has bee...

9.8CVSS5.8AI score0.00421EPSS
Exploits1References5
OSV
OSV
added 2025/06/09 11:15 a.m.4 views

CVE-2025-36528

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports...

8.3CVSS5.8AI score0.01248EPSS
Exploits0References1
OSV
OSV
added 2025/06/06 4:15 a.m.1 views

CVE-2025-5716

A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

6.9CVSS5.8AI score0.00345EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.3 views

WordPress plugin Epicwin Plugin 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...

8.2CVSS8.3AI score0.0016EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/06 12:0 a.m.3 views

WordPress plugin GamiPress SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

7.6CVSS7.8AI score0.00288EPSS
Exploits0References1
OSV
OSV
added 2025/06/05 7:15 p.m.3 views

CVE-2025-5677

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/ajax.php?action=saveapplication. The manipulation of the argument positionid leads to sql injection. The attack may be...

9.8CVSS5.8AI score0.00399EPSS
Exploits1References5
Snyk
Snyk
added 2025/06/05 6:30 a.m.4 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the library in a web application...

9.8CVSS8AI score0.00581EPSS
Exploits1References2
Snyk
Snyk
added 2025/06/05 6:30 a.m.3 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection through multiple vector store integrations. An attacker can read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the library in a web application...

9.8CVSS8AI score0.00581EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.2 views

PHPGurukul Notice Board System 安全漏洞

Notice Board System is a bulletin board system. A SQL injection vulnerability exists in the Notice Board System, which originates from a lack of validation of externally-entered SQL statements in the parameter mobilenumber in file /admin-profile.php. An attacker can exploit this vulnerability to...

8.8CVSS8.2AI score0.00361EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.3 views

PHPGurukul Notice Board System 安全漏洞

Notice Board System is a bulletin board system. The Notice Board System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the file /forgot-password.php parameter email. An attacker can exploit this vulnerability to execute...

9.8CVSS8.1AI score0.00454EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.3 views

PHPGurukul Complaint Management System 注入漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter subcategory in the file /admin/edit-subcategory.php. An attacker can...

8.8CVSS8.1AI score0.00318EPSS
Exploits1References6
Rows per page
Query Builder