Lucene search
+L

117 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/25 12:00 a.m.•0 views

CVE-2026-37149: Improper Neutralization of Special Elements used in an SQL Command

GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost parameter in /grocery/searchproducts.php. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement...

7.7CVSS5.9AI score0.00217EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/06/20 12:00 a.m.•32 views

PT-2026-51178

Name of the Vulnerable Software and Affected Versions GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN version 1.0 Description An issue exists where a crafted SQL statement can be used to access sensitive database information. This occurs via the scost parameter in the...

7.7CVSS5.9AI score0.00217EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/14 12:00 a.m.•1 views

CVE-2025-63939: Improper Neutralization of Special Elements used in an SQL Command

Improper input handling in /Grocery/searchproductsitname.php, in anirudhkannan Grocery Store Management System 1.0, allows SQL injection via the sitemname POST parameter...

9.8CVSS5.8AI score0.00269EPSS
SaveExploits1References2
NVD
NVD
•added 2026/02/22 11:16 a.m.•22 views

CVE-2026-2944

A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack ma...

9.8CVSS0.07254EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/02/22 11:02 a.m.•11 views

CVE-2026-2944 Tosei Online Store Management System ネット店舗管理システム HTTP POST Request monitor.php system os command injection

A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack ma...

7.5CVSS7.3AI score0.07254EPSS
SaveExploits1References4
CVE
CVE
•added 2026/02/22 11:02 a.m.•62 views

CVE-2026-2944

The CVE-2026-2944 affects Tosei Online Store Management System v1.01. The vulnerability resides in the /cgi-bin/monitor.php component of the HTTP POST Request Handler; manipulating the DevId argument enables OS command injection. It is exploitable remotely, and public PoCs/exploits exist. No vend...

9.8CVSS5.6AI score0.07254EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/22 12:00 a.m.•1 views

CVE-2026-2944: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01. Affected is the function system of the file /cgi-bin/monitor.php of the component HTTP POST Request Handler. Performing a manipulation of the argument DevId results in os command injection. The attack ma...

9.8CVSS7AI score0.07254EPSS
SaveExploits1References1
CVE
CVE
•added 2026/01/19 11:02 p.m.•37 views

CVE-2026-1192

CVE-2026-1192 affects Tosei Online Store Management System 1.01. The vulnerability is in an unknown function within /cgi-bin/imode_alldata.php where manipulating the DevId argument can cause remote command injection. Public exploit details exist; vendor was contacted but did not respond. Descript...

7.5CVSS5.4AI score0.06948EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2026/01/19 11:02 p.m.•7 views

CVE-2026-1192 Tosei Online Store Management System ネット店舗管理システム imode_alldata.php command injection

A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imodealldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attack can be executed remotely. The exploi...

7.5CVSS5.4AI score0.06948EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•0 views

CVE-2026-1192: Improper Neutralization of Special Elements used in a Command

A vulnerability was determined in Tosei Online Store Management System ネット店舗管理システム 1.01. The affected element is an unknown function of the file /cgi-bin/imodealldata.php. Executing a manipulation of the argument DevId can lead to command injection. The attack can be executed remotely. The exploi...

7.5CVSS7AI score0.06948EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:36 p.m.•20 views

CVE-2023-49540

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/history. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the history parameter...

6.1CVSS6.1AI score0.00573EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:36 p.m.•17 views

CVE-2023-49539

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/category. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the category parameter...

6.1CVSS6.1AI score0.00573EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-48477

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00459EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2022-48115

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00387EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-47048

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.00772EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-15006

Malicious code in bioql PyPI...

7.8CVSS5.6AI score0.00349EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-42826

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00429EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2022-51587

Malicious code in bioql PyPI...

7.5CVSS5.7AI score0.01245EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-48117

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00554EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2025-14159

Malicious code in bioql PyPI...

7.8CVSS5.6AI score0.00489EPSS
SaveExploits1References5
Rows per page
Query Builder