Lucene search
K

319 matches found

CNNVD
CNNVD
added 2023/03/09 12:0 a.m.3 views

Sourcecodester COVID 19 Testing Management System SQL注入漏洞

Sourcecodester COVID 19 Testing Management System is a web-based application that provides an online platform for personal and Covid test administration to manage individual testing processes and results. A SQL injection vulnerability exists in SourceCodester COVID 19 Testing Management System...

9.8CVSS7AI score0.00291EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/03/09 12:0 a.m.3 views

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software by Sk.Amir Hamza, an individual developer from Bangladesh. A security vulnerability exists in Online Student Management System v1.0, which originates from a SQL injection vulnerability via the searchdata parameter of...

9.8CVSS8.7AI score0.0025EPSS
Exploits1References3
OSV
OSV
added 2023/01/27 11:15 a.m.2 views

CVE-2023-0527

A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file search-request.php. The manipulation of the argument searchdata with the input "alertdocument.domain leads to cross site...

6.1CVSS3.8AI score
Exploits0References3
CNNVD
CNNVD
added 2023/01/27 12:0 a.m.3 views

PHPGurukul Online Security Guards Hiring System 跨站脚本漏洞

Online Security Guards Hiring System is an online security guard hiring system. A cross-site scripting vulnerability exists in version 1.0 of the PHPGurukul Online Security Guards Hiring System, which stems from an incorrect manipulation of the parameter searchdata that can lead to cross-site...

6.1CVSS4.2AI score0.08968EPSS
Exploits4References6
OSV
OSV
added 2023/01/26 9:18 p.m.0 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS5.8AI score0.00234EPSS
Exploits0References2
NVD
NVD
added 2023/01/26 9:18 p.m.16 views

CVE-2022-46128

phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting XSS via searchdata=...

6.1CVSS6AI score0.00234EPSS
Exploits0References2
OSV
OSV
added 2022/09/30 7:15 p.m.0 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8CVSS5.8AI score
Exploits0References4
NVD
NVD
added 2022/09/30 7:15 p.m.7 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8CVSS0.00294EPSS
Exploits1References4
NVD
NVD
added 2022/09/30 7:15 p.m.13 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS0.0127EPSS
Exploits2References4
OSV
OSV
added 2022/09/30 7:15 p.m.0 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS5.7AI score
Exploits0References4
Prion
Prion
added 2022/09/30 7:15 p.m.17 views

Cross site scripting

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

5.8CVSS6AI score0.0127EPSS
Exploits2References3Affected Software1
Prion
Prion
added 2022/09/30 7:15 p.m.10 views

Sql injection

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

7.5CVSS9.8AI score0.00294EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/09/30 6:10 p.m.17 views

CVE-2022-35155

Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...

6.2AI score0.0127EPSS
Exploits2References4
CVE
CVE
added 2022/09/30 6:10 p.m.45 views

CVE-2022-35155

CVE-2022-35155 concerns the Bus Pass Management System v1.0, where a reflected cross-site scripting (XSS) vulnerability exists in the searchdata parameter. Multiple connected sources confirm the issue: the vulnerability is triggered via user-supplied input echoed into HTML in the response (notabl...

6.1CVSS6AI score0.0127EPSS
Exploits2References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 6:10 p.m.23 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8AI score0.00294EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.2 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System v1.0 has a SQL injection vulnerability, which stems from an SQL injection vulnerability found to be contained in the searchdata parameter...

9.8CVSS8.4AI score0.00294EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.2 views

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. A cross-site scripting vulnerability exists in Bus Pass Management System v1.0, which was discovered to contain a cross-site scripting XSS vulnerability via the searchdata parameter...

6.1CVSS5.9AI score0.0127EPSS
Exploits2References5
Positive Technologies
Positive Technologies
added 2022/09/30 12:0 a.m.3 views

PT-2022-22605

Name of the Vulnerable Software and Affected Versions Bus Pass Management System version 1.0 Description The issue is related to a reflected cross-site scripting XSS vulnerability. This vulnerability occurs via the searchdata parameter. Recommendations For Bus Pass Management System version 1.0, ...

6.1CVSS5.8AI score0.0127EPSS
Exploits2References8
OSV
OSV
added 2022/06/16 5:15 p.m.2 views

CVE-2022-31382

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php...

9.8CVSS7.3AI score0.00713EPSS
Exploits1References3
CVE
CVE
added 2022/06/16 4:46 p.m.66 views

CVE-2022-31382

Directory Management System v1.0 contains a SQL injection vulnerability in the search-dirctory.php component, exploitable via the searchdata parameter. This is the root cause described across multiple sources (CVE-2022-31382). Impact details are limited to the SQLi risk; CVSS scores in the cited ...

9.8CVSS9.8AI score0.00713EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder