Lucene search
K

1174 matches found

CNVD
CNVD
added 2021/07/24 12:0 a.m.17 views

PHPGurukul Student Record System SQL Injection Vulnerability (CNVD-2022-58221)

PHPGurukul Student Record System is an application. A SQL injection vulnerability exists in PHPGurukul Student Record System version 4.0, which stems from the lack of validation of externally entered SQL statements in the sid parameter of edit-sub.php, and can be exploited by remote attackers to...

9.8CVSS5.4AI score0.03694EPSS
Exploits1References1
Prion
Prion
added 2021/07/23 2:15 p.m.8 views

Sql injection

SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information...

5CVSS8AI score0.00316EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2021/07/23 12:0 a.m.16 views

Sourcecodester Alumni Management System SQL Injection Vulnerability

Sourcecodester Alumni Management System is a Php, Mysql-based alumni management system from Sourcecodester, Inc. SourceCodester Alumni Management System version 1.0 is vulnerable to SQL injection, which allows remote attacker can exploit this vulnerability to execute arbitrary SQL statements via...

9.8CVSS4.5AI score0.00513EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/23 12:0 a.m.15 views

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57782)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

9.8CVSS2.9AI score0.00513EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/23 12:0 a.m.12 views

SourceCodester Sales and Inventory System SQL Injection Vulnerability

Bakeshop Inventory System is a bakery inventory management system. sourceCodester Sales and Inventory System has a security vulnerability that can be exploited by remote attackers to execute arbitrary SQL statements via the id parameter to ahiraadmin Inventory . php...

9.8CVSS5.8AI score0.00513EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/23 12:0 a.m.15 views

Sourcecodester Simple College Website SQL Injection Vulnerability

Sourcecodester Simple College Website is a Sourcecodester open source application. A content management system. SourceCodester Simple College Website v 1.0 is vulnerable to SQL injection, which can be exploited by remote attackers to execute arbitrary SQL statements against news.php via the id...

9.8CVSS5.3AI score0.00492EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/23 12:0 a.m.27 views

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57785)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization. The goal of this project is to provide CASAP with an automated enrollment system to streamline the school's processes and make them more effective, efficient and easily retrievable. SourceCodester Alumni...

9.8CVSS3.2AI score0.00513EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/23 12:0 a.m.24 views

SourceCodester Fantastic Blog CMS SQL Injection Vulnerability

SourceCodester Fantastic Blog CMS is an application. Absolutely brilliant web content management system for blogs/posts. SourceCodester Fantastic Blog CMS has a security vulnerability that can be exploited by attackers to execute arbitrary SQL statements via the id parameter to category.php...

9.8CVSS6.2AI score0.00617EPSS
Exploits1References1
NVD
NVD
added 2021/07/22 8:15 p.m.11 views

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

9.8CVSS0.00492EPSS
Exploits1References1
NVD
NVD
added 2021/07/22 8:15 p.m.6 views

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

9.8CVSS0.00444EPSS
Exploits0References1
Prion
Prion
added 2021/07/22 8:15 p.m.7 views

Sql injection

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

7.5CVSS9.8AI score0.00444EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2021/07/22 8:15 p.m.11 views

Sql injection

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

7.5CVSS9.8AI score0.00513EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/22 7:25 p.m.12 views

CVE-2021-25205

SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php...

10AI score0.00492EPSS
Exploits1References1
NVD
NVD
added 2021/07/22 7:15 p.m.10 views

CVE-2021-25212

SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manageevent.php...

9.8CVSS0.00513EPSS
Exploits1References1
Prion
Prion
added 2021/07/22 7:15 p.m.14 views

Sql injection

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewpay.php...

7.5CVSS9.8AI score0.00513EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2021/07/22 7:15 p.m.8 views

Sql injection

SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manageevent.php...

7.5CVSS9.8AI score0.00513EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/22 7:8 p.m.11 views

CVE-2021-25213

SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php...

10AI score0.00513EPSS
Exploits1References1
Cvelist
Cvelist
added 2021/07/22 7:5 p.m.9 views

CVE-2021-25209

SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to viewuser.php...

10AI score0.00444EPSS
Exploits0References1
CVE
CVE
added 2021/07/22 7:5 p.m.55 views

CVE-2021-25209

The CVE-2021-25209 entry corresponds to a SQL injection vulnerability in SourceCodester Theme Park Ticketing System v1.0. The flaw arises from insufficient validation of the id parameter in view_user.php, enabling remote attackers to execute arbitrary SQL statements. Affected software is the Them...

9.8CVSS9.8AI score0.00444EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/07/22 6:58 p.m.9 views

CVE-2021-25212

SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manageevent.php...

10AI score0.00513EPSS
Exploits1References1
Rows per page
Query Builder