Lucene search
+L

1319 matches found

Positive Technologies
Positive Technologies
•added 2025/02/16 12:00 a.m.•18 views

PT-2025-6888 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical vulnerability was found in the needyamin Library Card System, affecting an unknown functionality of the file /signup.php of the component Add Picture. The manipulation leads to...

9.8CVSS6.8AI score0.00918EPSS
SaveExploits1References12
CNNVD
CNNVD
•added 2025/02/16 12:00 a.m.•14 views

Library Card System 代码问题漏洞

Library Card System is a library management system developed by Md. Yamin Hossain, an individual developer in Bangladesh. A code issue vulnerability exists in Library Card System version 1.0 due to an unrestricted upload issue contained in the /signup.php file of the Add Picture module...

9.8CVSS7.6AI score0.00918EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/02/05 6:49 a.m.•20 views

CVE-2024-50475

Missing Authorization vulnerability in Scott Gamon Signup Page signup-page allows Privilege Escalation.This issue affects Signup Page: from n/a through = 1.0...

9.8CVSS5.9AI score0.01255EPSS
SaveExploits1References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:02 p.m.•10 views

Malicious code in signup-ui-url-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/02/03 5:02 p.m.•12 views

MAL-2025-868 Malicious code in signup-ui-url-generator (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2025/02/01 8:00 a.m.•17 views

The email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.

...

5.3CVSS7.5AI score0.02527EPSS
SaveExploits1
OSV
OSV
•added 2025/01/30 12:15 a.m.•19 views

CVE-2025-0844

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the argument firstname/lastname/email/borrow/useraddress...

6.1CVSS3.8AI score0.00507EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/01/29 11:31 p.m.•27 views

CVE-2025-0844 needyamin Library Card System Registration Page signup.php cross site scripting

A vulnerability was found in needyamin Library Card System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the argument firstname/lastname/email/borrow/useraddress...

6.9CVSS4.4AI score0.00507EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/01/29 12:00 a.m.•17 views

PT-2025-4070 · Unknown · Needyamin Library Card System

Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A problem was found in the needyamin Library Card System. It affects an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the arguments...

6.9CVSS4.8AI score0.00507EPSS
SaveExploits1References10
OSV
OSV
•added 2024/12/09 7:15 p.m.•21 views

CVE-2024-54921

A SQL Injection was found in /studentsignup.php in kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL commands to get unauthorized database access via the username, firstname, lastname, and classid parameters...

9.8CVSS6.1AI score0.006EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/09 5:15 p.m.•11 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS6AI score0.00788EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/12/09 5:15 p.m.•15 views

CVE-2022-38946

Arbitrary File Upload vulnerability in Doctor-Appointment version 1.0 in /Frontend/signupcom.php, allows attackers to execute arbitrary code...

9.8CVSS6AI score0.00788EPSS
SaveExploits1References2
OSV
OSV
•added 2024/12/09 3:15 p.m.•17 views

CVE-2024-54920

A SQL Injection vulnerability was found in /teachersignup.php of kashipara E-learning Management System v1.0, which allows remote attackers to execute arbitrary SQL command to get unauthorized database access via the firstname, lastname, and classid parameters...

9.8CVSS6.1AI score0.00599EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/09 12:00 a.m.•22 views

PT-2024-36438 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /teacher signup.php file, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database through...

9.8CVSS9.3AI score0.00599EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•16 views

Doctor-Appointment 安全漏洞

Doctor-Appointment is a doctor's appointment system by Divyanshu Sharma Personal Developer. A security vulnerability exists in Doctor-Appointment version 1.0, which stems from /Frontend/signupcom.php containing an arbitrary file upload vulnerability...

9.8CVSS7AI score0.00788EPSS
SaveExploits1References1
OSV
OSV
•added 2024/11/27 12:15 a.m.•11 views

CVE-2024-11818

A vulnerability classified as critical has been found in PHPGurukul User Registration & Login and User Management System 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.7AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/15 3:15 p.m.•20 views

CVE-2024-11243

A vulnerability classified as problematic has been found in code-projects Online Shop Store 1.0. This affects an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has...

6.1CVSS3.9AI score0.00635EPSS
SaveExploits1References6
OSV
OSV
•added 2024/11/15 11:07 a.m.•15 views

OESA-2024-2421 python3 security update

Python combines remarkable power with very clear syntax. It has modules, classes, exceptions, very high level dynamic data types, and dynamic typing. There are interfaces to many system calls and libraries, as well as to various windowing systems. New built-in modules are easily written in C or C...

5.3CVSS6.6AI score0.02527EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•17 views

Online Shop Store 代码注入漏洞

Online Shop Store is an online store system from Online Shop Store, Inc. A code injection vulnerability exists in Online Shop Store version 1.0, which stems from a cross-site scripting vulnerability in the m2 parameter of the /signup.php file...

6.9CVSS5AI score0.00635EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2024/11/15 12:00 a.m.•24 views

PT-2024-16853 · Unknown · Code-Projects Online Shoe Store

Name of the Vulnerable Software and Affected Versions: code-projects Online Shop Store version 1.0 Description: A problematic issue has been found in the code-projects Online Shop Store, affecting an unknown part of the file /signup.php. The manipulation of the argument m2 with the input leads to...

6.9CVSS6.7AI score0.00635EPSS
SaveExploits1References9
Rows per page
Query Builder