Lucene search
K

270 matches found

OSV
OSV
added 2023/03/09 9:15 p.m.3 views

CVE-2023-27213

Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php...

9.8CVSS5.8AI score
Exploits0References2
CNNVD
CNNVD
added 2023/03/09 12:0 a.m.3 views

Sourcecodester COVID 19 Testing Management System SQL注入漏洞

Sourcecodester COVID 19 Testing Management System is a web-based application that provides an online platform for personal and Covid test administration to manage individual testing processes and results. A SQL injection vulnerability exists in SourceCodester COVID 19 Testing Management System...

9.8CVSS7AI score0.00291EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/03/09 12:0 a.m.3 views

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by Sk.Amir Hamza, an individual developer from Bangladesh. A security vulnerability exists in Online Student Management System v1.0, which originates from a SQL injection vulnerability via the searchdata parameter of...

9.8CVSS8.7AI score0.0025EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/09 12:0 a.m.3 views

PT-2023-21011 · Unknown · Online Student Management System

Name of the Vulnerable Software and Affected Versions: Online Student Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the searchdata parameter at the "/eduauth/student/search.php" API endpoint...

9.8CVSS9.5AI score0.0025EPSS
Exploits1References6
OSV
OSV
added 2023/01/26 9:18 p.m.1 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS5.8AI score0.00234EPSS
Exploits0References2
OSV
OSV
added 2022/09/30 7:15 p.m.1 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2022/09/30 7:15 p.m.7 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8CVSS0.00294EPSS
Exploits1References4
NVD
NVD
added 2022/09/30 7:15 p.m.14 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS0.0127EPSS
Exploits2References4
OSV
OSV
added 2022/09/30 7:15 p.m.1 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS5.7AI score
Exploits0References4
Prion
Prion
added 2022/09/30 7:15 p.m.19 views

Cross site scripting

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

5.8CVSS6AI score0.0127EPSS
Exploits2References3Affected Software1
Prion
Prion
added 2022/09/30 7:15 p.m.11 views

Sql injection

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

7.5CVSS9.8AI score0.00294EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/09/30 6:10 p.m.20 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.2AI score0.0127EPSS
Exploits2References4
CVE
CVE
added 2022/09/30 6:10 p.m.45 views

CVE-2022-35155

CVE-2022-35155 concerns the Bus Pass Management System v1.0, where a reflected cross-site scripting (XSS) vulnerability exists in the searchdata parameter. Multiple connected sources confirm the issue: the vulnerability is triggered via user-supplied input echoed into HTML in the response (notabl...

6.1CVSS6AI score0.0127EPSS
Exploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 6:10 p.m.23 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8AI score0.00294EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.2 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System v1.0 has a SQL injection vulnerability, which stems from an SQL injection vulnerability found to be contained in the searchdata parameter...

9.8CVSS8.4AI score0.00294EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.2 views

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. A cross-site scripting vulnerability exists in Bus Pass Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS5.9AI score0.0127EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.3 views

PT-2022-22605

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the searchdata parameter. Recommendations For Bus Pass Management System version 1.0, ...

6.1CVSS5.8AI score0.0127EPSS
Exploits2References8
OSV
OSV
added 2022/06/16 5:15 p.m.2 views

CVE-2022-31382

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...

9.8CVSS7.3AI score0.00713EPSS
Exploits1References3
CVE
CVE
added 2022/06/16 4:46 p.m.67 views

CVE-2022-31382

Directory Management System v1.0 contains a SQL injection vulnerability in the search-dirctory.php component, exploitable via the searchdata parameter. This is the root cause described across multiple sources (CVE-2022-31382). Impact details are limited to the SQLi risk; CVSS scores in the cited ...

9.8CVSS9.8AI score0.00713EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2022/06/16 12:0 a.m.3 views

PT-2022-3049 · Unknown · Directory Management System

Name of the Vulnerable Software and Affected Versions: Directory Management System version 1.0 Description: The issue is related to a SQL injection vulnerability in the search-dirctory.php component of the Directory Management System. This vulnerability allows a remote attacker to execute arbitra...

10CVSS9.7AI score0.00713EPSS
Exploits1References9
Rows per page
Query Builder