Lucene search
+L

1371 matches found

Vulnrichment
Vulnrichment
•added 2024/11/13 12:00 a.m.•17 views

CVE-2024-50969

A Reflected cross-site scripting XSS vulnerability in browse.php of Code-projects Jonnys Liquor 1.0 allows remote attackers to inject arbitrary web scripts or HTML via the search parameter...

5.7AI score0.00517EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/11 12:00 a.m.•34 views

CVE-2024-50989

A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the "searchdata " parameter...

0.0051EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/11 12:00 a.m.•73 views

CVE-2024-50989

The PHPGurukul Online Marriage Registration System v1.0 is affected by a SQL injection vulnerability located in the /omrs/admin/search.php file. An attacker can exploit this by providing malicious input through the **

9.8CVSS8.6AI score0.0051EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/11/11 12:00 a.m.•33 views

CVE-2024-51054

A Cross Site Scriptng XSS vulnerability was found in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System 1.0, which allows remote attackers to execute arbitrary code via the "searchdata" POST request parameter...

0.00399EPSS
SaveExploits1References1
NVD
NVD
•added 2024/10/30 9:15 p.m.•34 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS0.00265EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/30 12:00 a.m.•16 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

7AI score0.00265EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/30 12:00 a.m.•79 views

CVE-2024-48807

The PHPGurukul Doctor Appointment Management System v.1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw. The root cause is the application's failure to effectively filter and escape user-supplied data, specifically through the search parameter . A local attacker can exploit this lack of sani...

5.4CVSS6.7AI score0.00265EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/10/30 12:00 a.m.•27 views

CVE-2024-48807

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

0.00265EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/30 12:00 a.m.•1 views

CVE-2024-48807: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in PHPGurukul Doctor Appointment Management System v.1.0 allows a local attacker to execute arbitrary code via the search parameter...

5.4CVSS6.5AI score0.00265EPSS
SaveExploits0References1
NVD
NVD
•added 2024/10/15 1:15 p.m.•34 views

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in /admin//search-result.php via the searchkey parameter...

9.8CVSS0.00601EPSS
SaveExploits1References1
CVE
CVE
•added 2024/10/15 12:00 a.m.•74 views

CVE-2024-48283

Phpgurukul User Registration & Login and User Management System 3.2 is vulnerable to SQL Injection in the /admin//search-result.php endpoint. The root cause is the improper neutralization of special elements used in an SQL command via the searchkey parameter. This vulnerability allows for potenti...

9.8CVSS8.3AI score0.00601EPSS
SaveExploits1References1Affected Software1
GithubExploit
GithubExploit
•added 2024/09/16 4:48 p.m.•115 views

Exploit for CVE-2024-55270

Student Management System 1.0 CVE-2024-55270 Overview T...

8.8CVSS6.2AI score0.00341EPSS
SaveExploits2
OSV
OSV
•added 2024/09/05 1:15 p.m.•12 views

CVE-2024-8468

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...

7.5CVSS5.8AI score0.00464EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/05 12:00 a.m.•12 views

PT-2024-39035 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal affected versions not specified Description: A SQL injection vulnerability allows an attacker to send a specially designed query through the search parameter in "/jobportal/index.php" and retrieve all the information stored in it...

9.8CVSS7.2AI score0.00464EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2024/09/05 12:00 a.m.•12 views

PHPGurukul Job Portal SQL注入漏洞

PHPGurukul Job Portal is a PHP-based job search website system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Job Portal version 1.0, which originates from the search parameter in /jobportal/index.php...

9.8CVSS8AI score0.00464EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/05 12:00 a.m.•1 views

CVE-2024-8468: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability, by which an attacker could send a specially designed query through search parameter in /jobportal/index.php, and retrieve all the information stored in it...

9.8CVSS5.8AI score0.00464EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/02 5:15 a.m.•22 views

CVE-2024-43775

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...

8.8CVSS0.00469EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/09/02 4:03 a.m.•40 views

CVE-2024-43775 Huachu Easytest Online Learning Test Platform - SQL Injection

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...

8.7CVSS0.00469EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/02 12:00 a.m.•1 views

CVE-2024-43775: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in search course titles function of Easytest Online Test Platform ver.24E01 and earlier allow remote authenticated users to execute arbitrary SQL commands via the search parameter...

8.8CVSS6.4AI score0.00469EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/01 12:00 a.m.•30 views

PT-2024-30647 · Unknown · Easytest Online Test Platform

Name of the Vulnerable Software and Affected Versions: Easytest Online Test Platform versions 24E01 and earlier Description: The issue allows remote authenticated users to execute arbitrary SQL commands via the search parameter in the search course titles function. This enables attackers to run...

8.8CVSS8.2AI score0.00469EPSS
SaveExploits0References8
Rows per page
Query Builder