Lucene search
+L

8640 matches found

CNNVD
CNNVD
added 2025/06/20 12:00 a.m.10 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.1AI score0.00415EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00438EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

Hospital Management System 注入漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. An injection vulnerability exists in Hospital Management System version 1.0, which results from SQL injection due to incorrect manipulation of parameter username1 in file /func3.php...

9.8CVSS7.7AI score0.00472EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/06/19 12:00 a.m.13 views

Brilliance Golden Link Secondary System 注入漏洞

Brilliance Golden Link Secondary System is a management system from Brilliance, China. An injection vulnerability exists in Brilliance Golden Link Secondary System 20250609 and prior versions, which originates from improper manipulation of the parameter custTradeName in the file...

9.8CVSS6.8AI score0.00416EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/19 12:00 a.m.12 views

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in the back-end database...

9.8CVSS7.7AI score0.00418EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:00 a.m.12 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of verification of the validity of XML objects’ sequences. This allows attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of verification of the validity of XML objects’ sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary SQL queries...

9.4CVSS6AI score0.00587EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:00 a.m.11 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of verification of the validity of XML objects’ sequences. This allows attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of verification of the validity of XML objects’ sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary SQL queries...

9.4CVSS6AI score0.00537EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:00 a.m.11 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of measures to neutralize special elements used within the operating system, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...

8.7CVSS6AI score0.02657EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2025/06/17 3:15 p.m.6 views

CVE-2025-48274

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in wpjobportal WP Job Portal allows Blind SQL Injection. This issue affects WP Job Portal: from n/a through 2.3.2...

7.5CVSS5.8AI score0.00292EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/17 3:15 a.m.10 views

CVE-2025-6154

A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.8AI score0.00438EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.8 views

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

8.8CVSS7AI score0.00356EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/06/17 12:00 a.m.15 views

School Fees Payment System datatable.php File SQL Injection Vulnerability

School Fees Payment System is a tuition payment system. The School Fees Payment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter sSortDir0 in the file /datatable.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00438EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.12 views

WordPress plugin WP Job Portal SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00292EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.10 views

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter testtype in the file...

9.8CVSS7.9AI score0.00438EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/17 12:00 a.m.7 views

WordPress plugin Rankie SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin...

8.5CVSS7.9AI score0.00252EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/06/16 12:00 a.m.10 views

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...

9.8CVSS7.7AI score0.00415EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/16 12:00 a.m.13 views

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is an open source restaurant order system from Code-Projects. An injection vulnerability exists in code-projects Restaurant Order System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file /table.php...

8.8CVSS6.9AI score0.00365EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/06/12 12:00 a.m.11 views

uptrace pgdriver 安全漏洞

uptrace pgdriver is an extension library for Golang from uptrace Moldova. A security vulnerability exists in uptrace pgdriver version v1.2.1, which stems from an unvalidated appendArg function in the /pgdriver/format.go file, which could lead to an SQL injection attack...

6.5CVSS7.9AI score0.00347EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/06/11 12:00 a.m.8 views

Dairy Farm Shop Management System /add-product.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter productname in the file...

9.8CVSS7.9AI score0.00607EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/11 12:00 a.m.9 views

Medical Card Generation System /admin/readenq.php File SQL Injection Vulnerability

Medical Card Generation System is a medical card generation system. The Medical Card Generation System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the /admin/readenq.php file. An attacker can...

8.8CVSS7AI score0.00421EPSS
SaveExploits1References1
Rows per page
Query Builder