Lucene search
K

6593 matches found

CNNVD
CNNVD
added 2024/01/08 12:0 a.m.3 views

iparking SQL Injection Vulnerability

iparking is fhsopensource open source a parking fee management system . iparking 1.5.22.RELEASE version of the SQL injection vulnerability , the vulnerability stems from the function getData SQL injection vulnerability...

9.8CVSS8AI score0.00123EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/01/08 12:0 a.m.3 views

PT-2024-14431 · Unknown · Events Shortcodes For The Events Calendar

Name of the Vulnerable Software and Affected Versions: Events Shortcodes For The Events Calendar versions 2.3.1 and earlier Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command. This allows for potential...

8.8CVSS9.2AI score0.00269EPSS
Exploits0References6
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.2 views

WordPress Plugin Randomize SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin Randomize suffers...

8.8CVSS7.7AI score0.00308EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/08 12:0 a.m.2 views

WordPress Plugin WP ERP SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP ERP is...

7.6CVSS7.3AI score0.00283EPSS
Exploits0References2
OSV
OSV
added 2024/01/07 3:15 p.m.1 views

CVE-2024-0280

A vulnerability has been found in Kashipara Food Management System up to 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file itemtypesubmit.php. The manipulation of the argument typename leads to sql injection. The attack can be launched remotely...

6.5CVSS5.7AI score0.00046EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.3 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of externally entered SQL statements in the password parameter of the loginCheck.php...

6.5CVSS8.3AI score0.00046EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.2 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in version 1.0 of the Kashipara Food Management System, which is caused by a lack of validation of the productname parameter of the rawstockuseddamagingsmt.php file against...

6.5CVSS8.2AI score0.00046EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.2 views

Hospital Management System SQL Injection Vulnerability

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A SQL injection vulnerability exists in Kashipara Hospital Management System version 1.0, which stems from a vulnerability in the...

9.8CVSS7.7AI score0.00195EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.4 views

Hospital Management System SQL注入漏洞

A Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs effectively. A SQL injection vulnerability exists in Hospital Management System version 1.0, which stems from a lack of validation of externally...

9.8CVSS7.9AI score0.00053EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/01/07 12:0 a.m.2 views

Kashipara Food Management System SQL注入漏洞

Kashipara Food Management System is a food management system from Kashipara. A SQL injection vulnerability exists in Kashipara Food Management System version 1.0, which stems from a lack of validation of the printid parameter of itemBillPdf.php against external SQL input, and can be exploited by ...

9.8CVSS8.2AI score0.00053EPSS
Exploits1References2
OSV
OSV
added 2024/01/06 5:15 a.m.2 views

CVE-2023-46953

SQL Injection vulnerability in ABO.CMS v.5.9.3, allows remote attackers to execute arbitrary code via the d parameter in the Documents module...

9.8CVSS6.2AI score
Exploits0References1
CNNVD
CNNVD
added 2024/01/05 12:0 a.m.4 views

QNAP Systems Video Station SQL Injection Vulnerability

QNAP Systems Video Station is a video management and playback application from QNAP Systems. The SQL injection vulnerability, which previously existed in QNAP Systems Video Station version 5.7.2 2023/11/23 , stems from the presence of a SQL injection vulnerability that could allow a user to injec...

8.8CVSS8AI score0.00131EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/01/05 12:0 a.m.3 views

Online Food Ordering System SQL Injection Vulnerability

Online Food Ordering System is an online food ordering system from the individual developer Carlo Montero. A SQL injection vulnerability exists in CodeAstro Online Food Ordering System version 1.0, which originates when /admin/ in the component Admin Panel contains unknown code that causes SQL...

9.8CVSS8.2AI score0.00045EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.2 views

Travel Website SQL Injection Vulnerability

Travel Website is a PHP-based travel website. A SQL injection vulnerability exists in Travel Website v1.0, which occurs when the username parameter of the signupAction.php page is processed without filtering before sending the data to the database for processing...

9.8CVSS7.9AI score0.00072EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/01/04 12:0 a.m.2 views

Kashipara Billing Software SQL Injection Vulnerability

Kashipara Billing Software is an application from Kashipara India. A security vulnerability exists in the v1.0 version of Kashipara Billing Software, which stems from the unfiltered processing of the cancelid parameter on the materialbill.php page before sending the data to the database for...

9.8CVSS6.8AI score0.00069EPSS
Exploits1References3
OSV
OSV
added 2024/01/02 1:15 p.m.1 views

CVE-2023-6436

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Ekol Informatics Website Template allows SQL Injection.This issue affects Website Template: through 20231215...

9.8CVSS5.8AI score0.0022EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/02 12:0 a.m.2 views

PT-2024-14954

Name of the Vulnerable Software and Affected Versions Ekol Informatics Website Template versions through 20231215 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS7.4AI score0.0022EPSS
Exploits0References11
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.2 views

Ekol Informatics Website Template SQL Injection Vulnerability

Ekol Informatics Website Template is a website template from Ekol. A SQL injection vulnerability exists in Ekol Informatics Website Template 20231215 and earlier versions, which stems from incorrect neutralization and allows SQL injection attacks...

9.8CVSS7.9AI score0.0022EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/01/01 12:0 a.m.3 views

PT-2024-1097 · Sourcecodester · Sourcecodester Engineers Online Portal

Name of the Vulnerable Software and Affected Versions: SourceCodester Engineers Online Portal version 1.0 Description: The issue is related to the lack of protection of the SQL query structure in the /admin/ component of the Admin Login feature. This allows a remote attacker to execute arbitrary...

10CVSS7.8AI score0.00063EPSS
Exploits0References12
CNNVD
CNNVD
added 2023/12/31 12:0 a.m.1 views

WordPress Plugin WP Adminify SQL Injection Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP Adminif...

7.6CVSS7.7AI score0.00139EPSS
Exploits0References2
Rows per page
Query Builder