Lucene search
K

851 matches found

CNNVD
CNNVD
added 2023/10/04 12:0 a.m.3 views

Online Computer and Laptop Store SQL Injection Vulnerability

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Computer and Laptop Store version 1.0, which originates from a SQL injection vulnerability in the file products.php...

9.8CVSS7.9AI score0.00722EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/09/29 12:0 a.m.2 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. Hospital Management System has a SQL injection vulnerability that stems from the discovery of a contained SQL injection vulnerability...

9.1CVSS7.9AI score0.0067EPSS
Exploits1References2
OSV
OSV
added 2023/09/28 4:15 p.m.4 views

CVE-2023-30415

Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/viewinquiry.php...

9.8CVSS5.8AI score0.00838EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/09/28 12:0 a.m.2 views

ZOHO ManageEngine Asset Management System SQL Injection Vulnerability

ZOHO ManageEngine Asset Management System is an asset management solution from ZOHO. A SQL injection vulnerability exists in ZOHO ManageEngine Asset Management System v1.0, which stems from vulnerability to an authenticated SQL injection vulnerability that could allow an authenticated attacker to...

8.8CVSS7.7AI score0.00646EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/09/25 12:0 a.m.4 views

PT-2023-27044 · Unknown · Uplight Cookiebanner

Name of the Vulnerable Software and Affected Versions: UpLight cookiebanner versions prior to 1.5.1 Description: The issue is related to a SQL injection vulnerability via the component Hook::getHookModuleExecList. This vulnerability was discovered in UpLight cookiebanner. Recommendations: For...

9.8CVSS8.2AI score0.00504EPSS
Exploits0References7
OSV
OSV
added 2023/09/20 5:15 p.m.2 views

CVE-2023-42660

In Progress MOVEit Transfer versions released before 2021.1.8 13.1.8, 2022.0.8 14.0.8, 2022.1.9 14.1.9, 2023.0.6 15.0.6, a SQL injection vulnerability has been identified in the MOVEit Transfer machine interface that could allow an authenticated attacker to gain unauthorized access to the MOVEit...

8.8CVSS5.8AI score0.00577EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/09/20 12:0 a.m.3 views

HotelDruid SQL Injection Vulnerability

Hoteldruid is a free and open source hotel management program from Hoteldruid. A security vulnerability exists in HotelDruid version v3.0.5, which stems from a SQL injection vulnerability in the parameter nutenteagg...

9.8CVSS8AI score0.03753EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/09/17 12:0 a.m.2 views

TONGDA Office Anywhere SQL Injection Vulnerability

TONGDA Office Anywhere is a collaborative office OA system. A SQL injection vulnerability exists in TONGDA Office Anywhere 11.10 and earlier versions, which stems from a SQL injection vulnerability in the parameter PLANID...

8.8CVSS8AI score0.00588EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/09/17 12:0 a.m.4 views

OpenRapid RapidCMS SQL Injection Vulnerability

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. OpenRapid RapidCMS version 1.3.1 SQL injection vulnerability , the vulnerability stems from the file /admin/article/article-add.php SQL injection vulnerability...

6.5CVSS7.9AI score0.00421EPSS
Exploits1References5
ATTACKERKB
ATTACKERKB
added 2023/09/14 6:15 p.m.1 views

CVE-2023-4832

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Aceka Company Management allows SQL Injection. This issue affects Company Management: before 3072...

9.8CVSS7.4AI score0.0055EPSS
Exploits0References3
GithubExploit
GithubExploit
added 2023/09/09 7:37 a.m.6 views

Exploit for SQL Injection in Simple_Online_Piggery_Management_System_Project Simple_Online_Piggery_Management_System

Online Piggery Farm Management Syst...

9.8CVSS7.4AI score0.15033EPSS
Exploits7
ATTACKERKB
ATTACKERKB
added 2023/09/05 8:15 p.m.3 views

CVE-2023-39654

abupy up to v0.4.0 was discovered to contain a SQL injection vulnerability via the component abupy.MarketBu.ABuSymbol.searchtosymboldict...

9.8CVSS5.7AI score0.00744EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/09/01 4:15 p.m.4 views

CVE-2023-40771

SQL injection vulnerability in DataEase v.1.18.9 allows a remote attacker to obtain sensitive information via a crafted string outside of the blacklist function...

7.5CVSS7.2AI score0.00739EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/08/28 12:0 a.m.4 views

PT-2023-9132 · Synology · Video Station

Name of the Vulnerable Software and Affected Versions: Video Station versions prior to 5.7.2 Description: A SQL injection issue affects Video Station, related to a lack of protection against SQL query structure attacks. This could allow a remote attacker to execute arbitrary code by injecting...

9CVSS9.4AI score0.00505EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2023/08/22 7:16 p.m.2 views

CVE-2023-23563

An issue was discovered in Geomatika IsiGeo Web 6.0. It allows remote authenticated users to obtain sensitive database content via SQL Injection...

6.5CVSS6AI score0.0091EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/08/08 12:0 a.m.3 views

Maid Hiring Management System Cross-Site Scripting Vulnerability

PHPGurukul Maid Hiring Management System is a maid hiring management system from PHPGurukul, Inc. A security vulnerability exists in Maid Hiring Management System v1.0, which originates from a SQL injection vulnerability in the Search Maid page...

4.8CVSS8AI score0.00473EPSS
Exploits1References5
OSV
OSV
added 2023/08/07 7:15 p.m.2 views

CVE-2023-4200

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file productdata.php.. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.8AI score0.00649EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/07/31 1:15 p.m.1 views

CVE-2023-37647

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...

9.8CVSS7.4AI score0.00593EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/07/21 12:0 a.m.4 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from the presence of an unknown function i...

9.8CVSS7AI score0.00634EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/07/16 12:0 a.m.3 views

Bylancer QuickJob SQL注入漏洞

Bylancer QuickJob is an advanced Job Board PHP script from Bylancer. A SQL injection vulnerability exists in Bylancer QuickJob version 6.1, which stems from the presence of an unknown function in the component GET Parameter Handler, which leads to sql injection via the parameters keywords/gender...

9.8CVSS7.2AI score0.00425EPSS
Exploits0References3
Rows per page
Query Builder