Lucene search
+L

32 matches found

Positive Technologies
Positive Technologies
•added 2025/09/11 12:00 a.m.•19 views

PT-2025-37176

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System contains a SQL injection flaw. This flaw allows an attacker to retrieve, create, update, and delete database information via the requestid parameter in the...

9.8CVSS7.2AI score0.00331EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/09/11 12:00 a.m.•26 views

PT-2025-37171

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System is susceptible to SQL Injection attacks. An attacker can potentially retrieve, create, update, and delete database information through the remark, status,...

9.8CVSS7.2AI score0.00331EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/07/19 12:00 a.m.•7 views

CVE-2025-52924

In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header...

4CVSS7AI score0.00245EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/06/11 12:00 a.m.•18 views

Online Fire Reporting System /request-details.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...

9.8CVSS8.3AI score0.00472EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/11 12:00 a.m.•10 views

Online Fire Reporting System /details.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /details.php. An attacker can exploi...

8.8CVSS7.1AI score0.00451EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•11 views

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /details.php. An attacker can exploi...

8.8CVSS8.2AI score0.00451EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/06/04 12:00 a.m.•14 views

PT-2025-23863 · Unknown · Phpgurukul Online Fire Reporting System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Fire Reporting System version 1.2 Description: A critical issue affects the processing of the file "/request-details.php". The manipulation of the requestid argument leads to SQL injection. The attack can be initiated...

9.8CVSS6.9AI score0.00472EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/06/04 12:00 a.m.•10 views

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter requestid in the file /request-details.php. An attacker ca...

9.8CVSS7AI score0.00472EPSS
SaveExploits1References5
Code423n4
Code423n4
•added 2022/12/16 12:00 a.m.•18 views

Function fulfillRandomWords in VRFNFTRandomDraw contract must not revert

Lines of code Vulnerability details The VRFNFTRandomDraw contract implements the Chainlink VFR feature to pull random data to select the raffle winner. As per their security guidelines the implementation of the fulfillRandomWords function must not revert. Impact If the fulfillRandomWords function...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2015/07/13 12:00 a.m.•7 views

SQL Injection Vulnerability in Panmicro OA Office System Requestid Parameter

Panavision OA Office System is a coordination office software. A SQL injection vulnerability exists in the Panmicro OA Office System requestid parameter, which allows attackers to exploit the vulnerability to obtain sensitive information from the database...

7.6AI score
SaveExploits0References1
Prion
Prion
•added 2007/11/08 2:46 a.m.•34 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 requestid, 2 fileid, 3 woMode, and 2 woID parameters. NOTE: the provenance of this information is...

4.3CVSS6AI score0.01033EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2007/11/08 2:00 a.m.•34 views

CVE-2007-5891

Multiple cross-site scripting XSS vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote attackers to inject arbitrary web script or HTML via the 1 requestid, 2 fileid, 3 woMode, and 2 woID parameters. NOTE: the provenance of this information is...

5.7AI score0.01033EPSS
SaveExploits0References4
Rows per page
Query Builder