Lucene search
+L

215 matches found

Cvelist
Cvelist
added 2025/08/14 2:32 a.m.23 views

CVE-2025-8931 code-projects Medical Store Management System ChangePassword.java sql injection

A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of the file ChangePassword.java. The manipulation of the argument newPassTxt leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

6.5CVSS0.00382EPSS
SaveExploits1References6
CVE
CVE
added 2025/08/14 2:32 a.m.29 views

CVE-2025-8930

The CVE-2025-8930 entry affects code-projects Medical Store Management System 1.0, specifically the UpdateCompany.java component of the Update Company Page. The vulnerability arises from manipulation of the companyNameTxt parameter, enabling SQL injection. It is remotely executable and the exploi...

8.8CVSS7.6AI score0.00382EPSS
SaveExploits1References6Affected Software1
CNNVD
CNNVD
added 2025/08/14 12:00 a.m.9 views

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter companyNameTxt in the file UpdateCompany.java. An...

8.8CVSS8.2AI score0.00382EPSS
SaveExploits1References6
OSV
OSV
added 2025/08/13 10:15 p.m.11 views

CVE-2025-8929

A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

8.8CVSS5.8AI score0.00382EPSS
SaveExploits1References6
CVE
CVE
added 2025/08/13 10:02 p.m.25 views

CVE-2025-8929

CVE-2025-8929 affects the code-projects Medical Store Management System 1.0. The vulnerability resides in the file MainPanel.java , where the input parameter searchTxt is not properly filtered, leading to a SQL injection . Exploitation can be performed remotely, and the exploit has been disclosed...

8.8CVSS7.8AI score0.00382EPSS
SaveExploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/08/13 10:02 p.m.4 views

CVE-2025-8928 code-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection

A vulnerability was identified in code-projects Medical Store Management System 1.0. This affects an unknown part of the file UpdateMedicines.java of the component Update Medicines Page. The manipulation of the argument productNameTxt leads to sql injection. It is possible to initiate the attack...

6.5CVSS7.6AI score0.00382EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.13 views

PT-2025-33097 · Code Projects · Medical Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability was identified in code-projects Medical Store Management System 1.0, affecting an unknown part of the file UpdateMedicines.java within the Update Medicines...

8.8CVSS6.7AI score0.00382EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/08/13 12:00 a.m.9 views

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. Medical Store Management System suffers from a SQL injection vulnerability that originates from a misuse of the parameter productNameTxt in the file UpdateMedicines.java resulting in a SQL injection attack, which can be exploited by...

8.8CVSS7.7AI score0.00382EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.12 views

PT-2025-33098 · Code Projects · Medical Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation o...

8.8CVSS8.1AI score0.00382EPSS
SaveExploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 10:28 a.m.13 views

CVE-2024-7897

A vulnerability classified as critical has been found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This affects an unknown part of the file /cgi-bin/toseikikai.php. The manipulation of the argument kikaibangou leads to command injection. It is possible to initiate the attac...

8.8CVSS7.4AI score0.02595EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:50 a.m.11 views

CVE-2024-7896

A vulnerability was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. It has been rated as critical. Affected by this issue is some unknown functionality of the file /cgi-bin/p1ftpserver.php. The manipulation of the argument adrtxt leads to command injection. The attack ma...

8.8CVSS8.9AI score0.0225EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 5:05 a.m.13 views

CVE-2023-49543

Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating...

9.8CVSS7.1AI score0.00955EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/23 3:17 a.m.11 views

CVE-2023-23024

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the writer parameter...

6.1CVSS6AI score0.00423EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:19 a.m.12 views

CVE-2022-3452

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument categoryname leads to cross site scripting. The attack can be initiated remotely...

5.4CVSS6.4AI score0.00415EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:18 a.m.20 views

CVE-2022-45613

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the publisher parameter...

5.4CVSS6AI score0.00459EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:16 a.m.9 views

CVE-2022-45215

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module...

5.4CVSS5.8AI score0.00377EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:16 a.m.10 views

CVE-2022-45225

Book Store Management System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in /bsmsci/index.php/book. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the booktitle parameter...

6.1CVSS6.1AI score0.00484EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:06 a.m.15 views

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

10CVSS8.3AI score0.01537EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:05 p.m.10 views

CVE-2022-3453

A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /transcation.php. The manipulation of the argument buyername leads to cross site scripting. The attack may be initiated remotely...

5.4CVSS6.3AI score0.00371EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:45 p.m.13 views

CVE-2022-45217

A cross-site scripting XSS vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Level parameter under the Add New System User module...

5.4CVSS5.8AI score0.00548EPSS
SaveExploits1References1
Rows per page
Query Builder