Lucene search
+L

2321 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•7 views

CVE-2024-2715: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Campcodes Complete Online DJ Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/user-search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack may be launche...

6.1CVSS3.8AI score0.00536EPSS
SaveExploits1References2
NVD
NVD
•added 2024/03/07 11:15 p.m.•32 views

CVE-2024-2269

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...

9.8CVSS6.8AI score0.00558EPSS
SaveExploits0References3
CVE
CVE
•added 2024/03/07 11:00 p.m.•80 views

CVE-2024-2269

CVE-2024-2269 affects keerti1924 Online-Book-Store-Website 1.0. The vulnerability is in the /search.php file where the search parameter is manipulated to cause SQL injection. It can be exploited remotely, and the exploit has been disclosed publicly. The CVSS metrics across sources indicate high s...

9.8CVSS6.8AI score0.00558EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2024/03/07 12:00 a.m.•3 views

PT-2024-19530

Name of the Vulnerable Software and Affected Versions keerti1924 Online-Book-Store-Website version 1.0 Description A critical issue has been found in the keerti1924 Online-Book-Store-Website, affecting an unknown functionality of the file /search.php. The manipulation of the search argument leads...

9.8CVSS0.00558EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•5 views

CVE-2024-2269: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in keerti1924 Online-Book-Store-Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /search.php. The manipulation of the argument search leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.5AI score0.00558EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/01/12 12:00 a.m.•19 views

PT-2024-12223 · Unknown · Oretnom23 Judging Management System

Name of the Vulnerable Software and Affected Versions: oretnom23 Judging Management System version 1.0 Description: The issue allows remote attackers to execute arbitrary code and obtain sensitive information via the txtsearch parameter in the "review search.php" endpoint. Recommendations: For...

9.8CVSS9.6AI score0.01024EPSS
SaveExploits1References4
CNVD
CNVD
•added 2024/01/12 12:00 a.m.•13 views

Hospital Management System SQL Injection Vulnerability (CNVD-2026-32769)

Hospital Management System is a hospital management system developed by PHPGurukul Company, based on PHP and MySQL. The Hospital Management System has a SQL injection vulnerability, which stems from the lack of validation for external SQL statements in the searchdata parameter of the...

9.8CVSS6.5AI score0.00649EPSS
SaveExploits1
NVD
NVD
•added 2024/01/10 3:15 a.m.•37 views

CVE-2024-0363

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...

9.8CVSS6.8AI score0.00649EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/10 3:15 a.m.•23 views

Sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...

5.2CVSS7.7AI score0.00649EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2024/01/10 2:31 a.m.•77 views

CVE-2024-0363

CVE-2024-0363 affects PHPGurukul Hospital Management System 1.0. The vulnerability lies in the admin/patient-search.php component where manipulating the argument enables SQL injection. Public disclosure of the exploit is noted, indicating potential practical abuse. No remediation or patch detail...

9.8CVSS9.5AI score0.00649EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/10 2:31 a.m.•56 views

CVE-2024-0363 PHPGurukul Hospital Management System patient-search.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...

5.5CVSS9.8AI score0.00649EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/10 12:00 a.m.•4 views

CVE-2024-0363: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file admin/patient-search.php. The manipulation of the argument searchdata leads to sql injection. The exploit has been...

9.8CVSS6.1AI score0.00649EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•5 views

PT-2024-15498

Name of the Vulnerable Software and Affected Versions PHPGurukul Hospital Management System version 1.0 Description A critical issue has been found in the PHPGurukul Hospital Management System, affecting some unknown functionality of the file admin/patient-search.php. The manipulation of the...

9.8CVSS5.5AI score0.00649EPSS
SaveExploits1References9
Prion
Prion
•added 2023/12/28 3:15 a.m.•39 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

5CVSS6.5AI score0.0067EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/28 2:31 a.m.•50 views

CVE-2023-7124 code-projects E-Commerce Site search.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

5CVSS6.2AI score0.0067EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•7 views

CVE-2023-7124: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS3.9AI score0.0067EPSS
SaveExploits1References2
NVD
NVD
•added 2023/11/07 6:15 a.m.•28 views

CVE-2019-25156

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

6.1CVSS4.5AI score0.00533EPSS
SaveExploits0References3
OSV
OSV
•added 2023/11/07 6:15 a.m.•33 views

CVE-2019-25156

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

6.1CVSS6.2AI score
SaveExploits0References3
CVE
CVE
•added 2023/11/07 5:31 a.m.•50 views

CVE-2019-25156

CVE-2019-25156 affects dstar2018 Agency versions up to 61. The vulnerability is in the unknown functionality of the file search.php, where manipulating the argument QSType/QuickSearch enables cross-site scripting. The attack can be launched remotely. A patch is provided (hash: 975b56953efabb43451...

6.1CVSS4.8AI score0.00533EPSS
SaveExploits0References3Affected Software1
Mend
Mend
•added 2023/11/07 5:31 a.m.•4 views

CVE-2019-25156

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument QSType/QuickSearch leads to cross site scripting. The attack can be launched remotely. The patch is...

6.1CVSS0.00533EPSS
SaveExploits0References3
Rows per page
Query Builder