Lucene search
K

8274 matches found

CNVD
CNVD
added 2025/06/27 12:0 a.m.4 views

Simple Pizza Ordering System update.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /update.php. An attacker can exploit this vulnerability...

9.8CVSS7.9AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

Simple Pizza Ordering System addmem.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8AI score0.00399EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.3 views

Simple Pizza Ordering System addcatexec.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter textfield in the file /addcatexec.php. An attacker can exploit...

9.8CVSS7.9AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.3 views

Simple Pizza Ordering System cashconfirm.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter transactioncode in the file /cashconfirm.php. The vulnerability can ...

9.8CVSS8AI score0.00399EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.8 views

Student Record system Using PHP and MySQL SQL Injection Vulnerability

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

7.1CVSS8.3AI score0.00282EPSS
Exploits0References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.4 views

Online Bidding System bidlog.php File SQL Injection Vulnerability

Online Bidding System is an online bidding system. Online Bidding System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID in the file /bidlog.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.4 views

Simple Pizza Ordering System adding-exec.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ingname in the file /adding-exec.php. An attacker can exploit this...

9.8CVSS7.9AI score0.00399EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.5 views

Code-Projects Food Distributor Site 注入漏洞

Code-Projects Food Distributor Site is a Code-Projects open source food distributor site. Code-Projects Food Distributor Site version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameters username/password in the file...

9.8CVSS7.6AI score0.00454EPSS
Exploits1References6
CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

Car Rental System message_admin.php File SQL Injection Vulnerability

Car Rental System is a car rental system. Car Rental System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the messageadmin.php file's parameter Message. An attacker can use this vulnerability to execute illegal SQL commands...

9.8CVSS8AI score0.00394EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.3 views

Online Shoe Store contactus1.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Message in the file /contactus1.php. The vulnerability can be exploited by an attacker t...

9.8CVSS7.9AI score0.00394EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

Eron Wowwo CRM SQL注入漏洞

Eron Wowwo CRM is a customer relationship management software from Eron Turkey. Eron Wowwo CRM suffers from a SQL injection vulnerability that stems from improper neutralization of special elements in SQL commands, which could lead to blind SQL injection...

9.8CVSS7.9AI score0.00351EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.1 views

hosporder 注入漏洞

hosporder is a hospital appointment registration system by the individual developer Xiaohao.Shi in China. There is an injection vulnerability in hosporder, which originates from a SQL injection due to the incorrect operation of the parameter hospitalName in the file DoctorServiceImpl.java...

6.5CVSS6.9AI score0.00231EPSS
Exploits0References4
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.3 views

WordPress plugin LifterLMS SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.5AI score0.00303EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.3 views

bicycleSharingServer 注入漏洞

bicycleSharingServer is a bicycle sharing JavaWEB backend for huija individual developers in China. An injection vulnerability exists in bicycleSharingServer version 1.0, which originates from a mishandling of the selectAdminByNameLike function in the AdminController.java file, which could lead t...

6.5CVSS6.9AI score0.00231EPSS
Exploits0References4
CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

Art Gallery Management System forgot-password.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter email in the file /admin/forgot-password.php. An attacker c...

9.8CVSS8.3AI score0.00448EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

Art Gallery Management System changepropic.php File SQL Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter imageid in the file /admin/changepropic.php. An attacker...

8.8CVSS8.3AI score0.00361EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.3 views

Hostel Management System /contact_manager.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentrollno in the file /contactmanager.php. An attacker can use this...

9.8CVSS8.3AI score0.00415EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/06/27 12:0 a.m.2 views

WordPress plugin Amely SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.7AI score0.00374EPSS
Exploits0References1
CNVD
CNVD
added 2025/06/27 12:0 a.m.5 views

Online Hotel Reservation System messageexec.php File SQL Injection Vulnerability

Online Hotel Reservation System is a simple online hotel reservation system. Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Name in the file /messageexec.php. The...

9.8CVSS7.8AI score0.00394EPSS
Exploits1References1
OSV
OSV
added 2025/06/26 8:15 p.m.3 views

CVE-2025-53122

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in OpenNMS Horizon and Meridian applications allows SQL Injection. Users should upgrade to Meridian 2024.2.6 or newer, or Horizon 33.16 or newer. Meridian and Horizon installation instructions state...

6.9CVSS5.8AI score0.00208EPSS
Exploits0References2
Rows per page
Query Builder