Lucene search
+L

491 matches found

CVE
CVE
•added 2024/02/23 3:00 p.m.•140 views

CVE-2024-1820

CVE-2024-1820 affects code-projects Crime Reporting System 1.0, specifically inchargelogin.php. The vulnerability arises from unsafely handling the email and password parameters, enabling SQL injection. It is exploitable remotely and an exploit has been disclosed publicly. Multiple sources (NVD, ...

9.8CVSS7.5AI score0.00579EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•15 views

Crime Reporting System SQL Injection Vulnerability

Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A SQL injection vulnerability exists in Crime Reporting System version 1.0, which stems from an incorrect manipulation of the parameters email/password that can lead to an SQL injection...

9.8CVSS8AI score0.00579EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/02/23 12:00 a.m.•16 views

Crime Reporting System SQL Injection Vulnerability

Crime Reporting System is an online crime reporting system by the individual developer Tedmar Enoria. A SQL injection vulnerability exists in Crime Reporting System version 1.0, which stems from the fact that incorrect manipulation of the parameters policename/policeid/policespec/password can lea...

8.8CVSS8.4AI score0.00537EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•3 views

CVE-2024-1821: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...

8.8CVSS5.5AI score0.00537EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/23 12:00 a.m.•6 views

CVE-2024-1820: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file inchargelogin.php. The manipulation of the argument email/password leads to sql injection. The attack can be initiated remotely. The exploit...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/07/27 8:15 p.m.•15 views

CVE-2023-36942

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...

6.1CVSS6.5AI score0.00555EPSS
SaveExploits1References4
OSV
OSV
•added 2023/07/27 6:15 p.m.•13 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS5.9AI score0.00578EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/07/27 6:15 p.m.•17 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS6.5AI score0.00578EPSS
SaveExploits1References4
NVD
NVD
•added 2023/07/27 6:15 p.m.•29 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS5.9AI score0.00578EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/27 12:00 a.m.•18 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in the website title field. An attacker can exploit...

6.1CVSS6.4AI score0.00555EPSS
SaveExploits1References3
CVE
CVE
•added 2023/07/27 12:00 a.m.•83 views

CVE-2023-36941

The CVE-2023-36941 entry describes a cross-site scripting (XSS) vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2. The affected component is the PHPGurukul web application, with the vulnerability located in input handling for the fields team name, leader, and member...

6.1CVSS5.8AI score0.00578EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2023/07/27 12:00 a.m.•35 views

CVE-2023-36941

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6AI score0.00578EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/27 12:00 a.m.•40 views

CVE-2023-36942

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...

6AI score0.00555EPSS
SaveExploits1References2
CVE
CVE
•added 2023/07/27 12:00 a.m.•69 views

CVE-2023-36942

PHPGurukul Online Fire Reporting System Using PHP and MySQL version 1.2 is affected by a cross-site scripting (XSS) vulnerability in the website title field. The underlying issue is unsanitized input in the title being reflected, enabling an attacker to inject arbitrary web scripts or HTML. Repor...

6.1CVSS5.8AI score0.00555EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2023/07/27 12:00 a.m.•22 views

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system by Carlo Montero, an individual developer. A security vulnerability exists in Online Fire Reporting System version 1.2, which is caused by a cross-site scripting XSS vulnerability in several fields, including team name. The...

6.1CVSS6.4AI score0.00578EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/27 12:00 a.m.•6 views

CVE-2023-36942: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the website title field...

6.1CVSS6.5AI score0.00555EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/27 12:00 a.m.•4 views

CVE-2023-36941: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL 1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the team name, leader, and member fields...

6.1CVSS6.5AI score0.00578EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/07/10 6:15 p.m.•10 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.2AI score0.00537EPSS
SaveExploits1References4
OSV
OSV
•added 2023/07/10 6:15 p.m.•16 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS6.1AI score0.00537EPSS
SaveExploits1References2
NVD
NVD
•added 2023/07/10 6:15 p.m.•30 views

CVE-2023-36940

Cross Site Scripting XSS vulnerability in PHPGurukul Online Fire Reporting System Using PHP and MySQL v.1.2 allows attackers to execute arbitrary code via a crafted payload injected into the search field...

4.8CVSS5.1AI score0.00537EPSS
SaveExploits1References2
Rows per page
Query Builder