Lucene search
+L

139 matches found

CNNVD
CNNVD
•added 2025/03/23 12:00 a.m.•12 views

Projectworlds Apartment Visitors Management System 注入漏洞

Projectworlds Apartment Visitors Management System is an apartment visitor management system from Projectworlds India. An injection vulnerability exists in Projectworlds Apartment Visitors Management System version 1.0, which stems from an incorrect manipulation of the parameter rid that can lead...

9.8CVSS8AI score0.00527EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/23 12:00 a.m.•0 views

CVE-2025-2657: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in projectworlds Apartment Visitors Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /front.php. The manipulation of the argument rid leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7AI score0.00527EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/22 12:00 a.m.•1 views

CVE-2025-0723: Improper Neutralization of Special Elements used in an SQL Command

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind and time-based SQL Injections via the rid and search parameters in all versions up to, and including, 5.9.4.7 due to insufficient escaping on the user supplied parameter and lack of sufficient...

6.5CVSS5.7AI score0.00382EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/04 12:00 a.m.•13 views

COMPOP 安全漏洞

COMPOP is an all-in-one point-of-sale POS software from COMPOP, Inc. A security vulnerability exists in COMPOP that can be exploited to execute arbitrary code by manipulating the rid, tid, et, and ts parameters...

9.8CVSS9.3AI score0.01992EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•1 views

CVE-2024-48445: Improper Authentication

An issue in compop.ca ONLINE MALL v.3.5.3 allows a remote attacker to execute arbitrary code via the rid, tid, et, and ts parameters...

9.8CVSS6.6AI score0.01992EPSS
SaveExploits3References1
NVD
NVD
•added 2024/10/28 9:15 p.m.•16 views

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

8.8CVSS0.00428EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/28 12:00 a.m.•12 views

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

7.9AI score0.00428EPSS
SaveExploits1References1
OSV
OSV
•added 2024/10/28 12:00 a.m.•14 views

CVE-2024-48177

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

8.8CVSS7.9AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/10/28 12:00 a.m.•10 views

MRCMS 安全漏洞

MRCMS is a content management system by the individual developer of marker. A security vulnerability exists in MRCMS version 3.1.2, which originates from the RID parameter in /admin/article/delete.do contains a SQL injection vulnerability...

8.8CVSS7.8AI score0.00428EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/28 12:00 a.m.•3 views

CVE-2024-48177: Improper Neutralization of Special Elements used in an SQL Command

MRCMS 3.1.2 contains a SQL injection vulnerability via the RID parameter in /admin/article/delete.do...

8.8CVSS5.8AI score0.00428EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/28 12:00 a.m.•60 views

CVE-2024-48177

The content management system MRCMS version 3.1.2 is vulnerable to a SQL injection vulnerability. The flaw exists in the RID parameter located at the /admin/article/delete.do endpoint. This vulnerability allows an attacker to interfere with backend database queries, potentially leading to unautho...

8.8CVSS8.2AI score0.00428EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/02/09 2:15 p.m.•17 views

CVE-2024-25315

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

9.8CVSS5.8AI score0.00734EPSS
SaveExploits1References1
Prion
Prion
•added 2024/02/09 2:15 p.m.•35 views

Sql injection

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

7.5CVSS8.8AI score0.00734EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/02/09 12:00 a.m.•16 views

Hotel Managment System SQL Injection Vulnerability

Hotel Managment System is an open source hotel management system from Code-projects. Hotel Managment System version 1.0 suffers from a SQL injection vulnerability that originates from allowing SQL injection via the rid parameter in Hotel/admin/roombook.php...

9.8CVSS8AI score0.00734EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/02/09 12:00 a.m.•50 views

CVE-2024-25315

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

10AI score0.00734EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/02/09 12:00 a.m.•17 views

PT-2024-20884 · Code Projects · Code-Projects Hotel Managment System

Name of the Vulnerable Software and Affected Versions: Code-projects Hotel Managment System version 1.0 Description: The issue allows SQL Injection via the rid parameter in the "Hotel/admin/roombook.php" endpoint. This could potentially be exploited by manipulating the rid parameter to inject...

9.8CVSS9.6AI score0.00734EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/09 12:00 a.m.•3 views

CVE-2024-25315: Improper Neutralization of Special Elements used in an SQL Command

Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2...

9.8CVSS5.8AI score0.00734EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/10/26 12:00 a.m.•10 views

OcoMon Security Vulnerability

OcoMon is a helpdesk system from the personal developer Rafael Foster. It is designed to manage integrated inventory control that supports tickets and computing devices. A security vulnerability exists in OcoMon versions prior to v4.0.1 that stems from an information disclosure vulnerability in t...

7.5CVSS6.1AI score0.00527EPSS
SaveExploits0References3
OSV
OSV
•added 2023/07/20 8:15 p.m.•14 views

CVE-2023-31753

SQL injection vulnerability in diskusi.php in eNdonesia 8.7, allows an attacker to execute arbitrary SQL commands via the "rid=" parameter...

9.8CVSS6AI score0.01269EPSS
SaveExploits2References1
GithubExploit
GithubExploit
•added 2023/07/20 1:56 p.m.•23 views

Exploit for SQL Injection in Endonesia

Proof of Concept for CVE-2023-31753 Description: A SQL Injectio...

9.8CVSS8.8AI score0.01269EPSS
SaveExploits2
Rows per page
Query Builder