Lucene search
+L

139 matches found

CNVD
CNVD
•added 2025/08/20 12:00 a.m.•16 views

Visitor Management System front.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. The Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /front.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00417EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/08/20 12:00 a.m.•18 views

Visitor Management System visitor_out.php File SQL Injection Vulnerability

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /visitorout.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00421EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/16 7:10 a.m.•20 views

CVE-2025-8948

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

9.8CVSS7.7AI score0.00417EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/15 11:15 a.m.•19 views

CVE-2025-9047

A vulnerability has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /visitorout.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.7AI score0.00421EPSS
SaveExploits1References4
NVD
NVD
•added 2025/08/15 11:15 a.m.•14 views

CVE-2025-9047

A vulnerability has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /visitorout.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS0.00421EPSS
SaveExploits1References4
CVE
CVE
•added 2025/08/15 11:02 a.m.•38 views

CVE-2025-9047

CVE-2025-9047 affects projectworlds Visitor Management System 1.0. The vulnerability is a SQL injection in the file /visitor_out.php, triggered by manipulating the rid parameter in an unknown function, with remote execution possible. Multiple connected sources confirm the issue and describe it as...

9.8CVSS7.6AI score0.00421EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/08/15 11:02 a.m.•31 views

CVE-2025-9047 projectworlds Visitor Management System visitor_out.php sql injection

A vulnerability has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /visitorout.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

7.5CVSS0.00421EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/15 12:00 a.m.•22 views

PT-2025-33476 · Projectworlds · Visitor Management System

Name of the Vulnerable Software and Affected Versions: Projectworlds Visitor Management System version 1.0 Description: A vulnerability has been found in projectworlds Visitor Management System 1.0. The manipulation of the argument rid in an unknown function of the file /visitor out.php leads to...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/08/15 12:00 a.m.•19 views

Projectworlds Visitor Management System 注入漏洞

Visitor Management System is a visitor access management system. Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /visitorout.php. An attacker can exploit this...

9.8CVSS8.1AI score0.00421EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/15 12:00 a.m.•1 views

CVE-2025-9047: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /visitorout.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/14 7:15 a.m.•12 views

CVE-2025-8948

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

9.8CVSS0.00417EPSS
SaveExploits1References4
CVE
CVE
•added 2025/08/14 7:02 a.m.•30 views

CVE-2025-8948

The projectworlds Visitor Management System 1.0 is affected by a SQL injection in the front.php file via the rid parameter. Multiple connected sources confirm remote exploitation and publicly disclosed exploit details. No official patch/version removal details are provided in the documents; at le...

9.8CVSS7.6AI score0.00417EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/08/14 7:02 a.m.•23 views

CVE-2025-8948 projectworlds Visitor Management System front.php sql injection

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

7.5CVSS0.00417EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/08/14 7:02 a.m.•6 views

CVE-2025-8948 projectworlds Visitor Management System front.php sql injection

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

7.5CVSS7.6AI score0.00417EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•11 views

Projectworlds Visitor Management System 注入漏洞

Visitor Management System is a visitor access management system. The Visitor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter rid in the file /front.php. An attacker can exploit this...

9.8CVSS8.1AI score0.00417EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•1 views

CVE-2025-8948: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the file /front.php. The manipulation of the argument rid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be...

9.8CVSS5.6AI score0.00417EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 6:17 a.m.•14 views

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

8.8CVSS5.9AI score0.00428EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/06 12:00 a.m.•0 views

CVE-2025-4363: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in itsourcecode Gym Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=endmembership. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. Th...

9.8CVSS7AI score0.00514EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•13 views

itsourcecode Gym Management System 安全漏洞

itsourcecode Gym Management System is an open source gym management system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Gym Management System, which is caused by an SQL injection due to misuse of the parameter rid in file/ajax.php...

9.8CVSS7.8AI score0.00514EPSS
SaveExploits1References6
OSV
OSV
•added 2025/03/23 6:15 p.m.•17 views

CVE-2025-2657

A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.00527EPSS
SaveExploits1References4
Rows per page
Query Builder