Lucene search
+L

119 matches found

CNNVD
CNNVD
added 2023/04/15 12:0 a.m.6 views

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the path...

9.8CVSS7AI score0.00749EPSS
SaveExploits1References4
CNVD
CNVD
added 2022/07/18 12:0 a.m.24 views

Information Leakage Vulnerabilities in the Intelligent Customer Service System of Beijing Qimo Technology Co.

Beijing SevenStranger Technology Co., Ltd. is a technology company with AI and communication technology as its core and data as its driving force. An information leakage vulnerability exists in the intelligent customer service system of Beijing Seven Mor Technology Co. Ltd, which can be exploited...

6.5AI score
SaveExploits0
NVD
NVD
added 2022/05/17 8:15 p.m.17 views

CVE-2022-30052

In Home Clean Service System 1.0, the password parameter is vulnerable to SQL injection attacks...

9.8CVSS0.0122EPSS
SaveExploits1References1
CVE
CVE
added 2022/05/17 7:32 p.m.84 views

CVE-2022-30052

CVE-2022-30052 affects Home Clean Service System 1.0. Affected component: password handling parameter; underlying issue is SQL injection in the password field. Documented impact per CVSS: high severity (CVSS v2 base 7.5, CVSS v3.1 base 9.8) with network attack vector, no authentication, and parti...

9.8CVSS9.8AI score0.0122EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2022/01/06 4:15 p.m.7 views

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

7.2CVSS5.8AI score0.03309EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/06 4:15 p.m.6 views

CVE-2021-46079

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to Html Injection...

7.2CVSS7.2AI score0.03309EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/06 4:15 p.m.4 views

CVE-2021-46078

An Unrestricted File Upload vulnerability exists in Sourcecodester Vehicle Service Management System 1.0. A remote attacker can upload malicious files leading to a Stored Cross-Site Scripting vulnerability...

4.8CVSS5.9AI score0.01261EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/06 4:15 p.m.8 views

CVE-2021-46073

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel...

4.8CVSS5.8AI score0.02759EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/06 4:15 p.m.7 views

CVE-2021-46074

A Stored Cross Site Scripting XSS vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the Settings Section in login panel...

4.8CVSS5.8AI score0.01142EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/06 3:15 p.m.9 views

CVE-2021-46076

Sourcecodester Vehicle Service Management System 1.0 is vulnerable to File upload. An attacker can upload a malicious php file in multiple endpoints it leading to Code Execution...

8.8CVSS5.8AI score0.03306EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/06 3:15 p.m.6 views

CVE-2021-46080

A Cross Site Request Forgery CSRF vulnerability exists in Vehicle Service Management System 1.0. An successful CSRF attacks leads to Stored Cross Site Scripting Vulnerability...

4.8CVSS5.8AI score0.0058EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.4 views

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. Sourcecodester Vehicle Service Management System has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB application, which can be exploited by attackers t...

4.8CVSS5.3AI score0.01142EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.10 views

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from the vulnerability stem...

4.8CVSS5.3AI score0.02736EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/06 12:0 a.m.5 views

Sourcecodester Vehicle Service Management System 安全漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. Sourcecodester Vehicle Service Management System has an elevation of privilege vulnerability that could be exploited by attackers to access...

7.2CVSS5.7AI score0.02616EPSS
SaveExploits2References3
RedhatCVE
RedhatCVE
added 2021/08/25 6:32 a.m.64 views

CVE-2021-3735

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset ahciresetport while handling a host-to-device Register FIS Frame Information Structure packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host...

4.4CVSS1.9AI score0.00197EPSS
SaveExploits0References3
CNVD
CNVD
added 2021/07/03 12:0 a.m.11 views

XSS Vulnerability in Meiqiao Online Customer Service System

Chengdu Meichai Network Technology Co., Ltd. provides one-stop customer interaction SaaS services; at present, Meichai has online customer service, call center and customer service robots and other products, which are committed to helping enterprises and customers to improve the efficiency of...

5.9AI score
SaveExploits0
CNVD
CNVD
added 2021/04/21 12:0 a.m.3 views

Logic flaw vulnerabilities in the public resources trading e-service system

Beijing Zhulong Information Technology Co., Ltd. is a high-tech enterprise focusing on the field of electronic bidding and procurement. A logic flaw vulnerability exists in the public resource transaction electronic service system. Attackers can utilize the vulnerability to bypass the...

7.5AI score
SaveExploits0
OSV
OSV
added 2021/04/03 1:16 p.m.8 views

MGASA-2021-0174 Updated kernel packages fix security vulnerabilities

This kernel update is based on upstream 5.10.27 and fixes at least the following security issues: The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions...

7.8CVSS6.8AI score0.00858EPSS
SaveExploits0References6
CNVD
CNVD
added 2021/02/26 12:0 a.m.3 views

Information leakage vulnerability in the omni-channel customer service system of Foshan Beame Information Technology Co.

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an information leakage vulnerability in the omni-channel customer service system of Foshan Beamy Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

6.6AI score
SaveExploits0
CNVD
CNVD
added 2021/02/26 12:0 a.m.5 views

Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

7AI score
SaveExploits0
Rows per page
Query Builder