Lucene search
K

5734 matches found

CNNVD
CNNVD
added 2025/06/23 12:0 a.m.2 views

Code-Projects Inventory Management System 安全漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the userid parameter in the /phpaction/changePassword.php file against an externally entered SQL statement. An...

9.8CVSS8.2AI score0.00394EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/06/23 12:0 a.m.2 views

Code-Projects Inventory Management System 安全漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the editCategoriesName parameter in the /phpaction/editCategories.php file for externally entered SQL statements. An...

9.8CVSS8.2AI score0.00399EPSS
Exploits1References6
CNVD
CNVD
added 2025/06/23 12:0 a.m.2 views

Nipah virus Testing Management System /bwdates-report-ds.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

8.8CVSS8.3AI score0.00335EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/23 12:0 a.m.1 views

SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-2025-17850)

T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...

8AI score
Exploits0
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.3 views

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter imageid in the file /admin/changepropic.php. An attacker...

8.8CVSS8.2AI score0.00361EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.2 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter firstname in the file...

9.8CVSS8.2AI score0.00399EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.4 views

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editid in the file /admin/changeimage.php. An attacker can...

8.8CVSS8.2AI score0.00361EPSS
Exploits1References6
OSV
OSV
added 2025/06/20 2:15 p.m.3 views

CVE-2025-32753

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, informati...

7.8CVSS5.8AI score0.00165EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.3 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.1AI score0.00399EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.2 views

Hospital Management System 注入漏洞

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. An injection vulnerability exists in Hospital Management System version 1.0, which results from SQL injection due to incorrect manipulation of parameter username1 in file /func3.php...

9.8CVSS7.7AI score0.00454EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.2 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00421EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.2 views

PHPGurukul Directory Management System 注入漏洞

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname in the file /admin/admin-profile.php. An attacker can...

8.8CVSS8.2AI score0.00318EPSS
Exploits1References6
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.3 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of verification of the validity of XML objects’ sequences. This allows attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of verification of the validity of XML objects’ sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary SQL queries...

9.4CVSS6AI score0.00537EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.4 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of verification of the validity of XML objects’ sequences. This allows attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of verification of the validity of XML objects’ sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary SQL queries...

9.4CVSS6AI score0.00587EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/06/18 12:0 a.m.5 views

The vulnerability of the Chamilo LMS electronic learning and content management system lies in the lack of measures to neutralize special elements used within the operating system, allowing attackers to execute arbitrary SQL queries.

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...

8.7CVSS6AI score0.02657EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2025/06/17 3:15 a.m.2 views

CVE-2025-6154

A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument studentrollno leads to sql injection. The attack may be initiated remotely. The exploit...

9.8CVSS5.8AI score0.00421EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.4 views

WordPress plugin WP Job Portal SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS9.1AI score0.00292EPSS
Exploits0References3
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.2 views

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter testtype in the file...

9.8CVSS7.9AI score0.00421EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/06/16 12:0 a.m.3 views

Code-Projects Restaurant Order System 注入漏洞

Code-Projects Restaurant Order System is a Code-Projects open source restaurant order system . Code-Projects Restaurant Order System version 1.0 suffers from an injection vulnerability that originates from SQL injection due to incorrect manipulation of the parameter ID in the file /tablelow.php...

9.8CVSS7.7AI score0.00399EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.3 views

uptrace pgdriver 安全漏洞

uptrace pgdriver is an extension library for Golang from uptrace Moldova. A security vulnerability exists in uptrace pgdriver version v1.2.1, which stems from an unvalidated appendArg function in the /pgdriver/format.go file, which could lead to an SQL injection attack...

6.5CVSS7.9AI score0.00331EPSS
Exploits1References7
Rows per page
Query Builder