Lucene search
+L

875 matches found

CNNVD
CNNVD
added 2022/10/27 12:0 a.m.3 views

Online Medicine Ordering System 安全漏洞

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its admin/?page=orders/vieworder file that operates on the parameter...

9.8CVSS8.5AI score0.00381EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.14 views

SourceCodester Food Ordering Management System 安全漏洞

Food Ordering Management System is a food ordering management system from Carlo Montero's personal developer. The Food Ordering Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by username, and can be exploited by attackers...

9.8CVSS7.8AI score0.00593EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/09/20 12:0 a.m.6 views

Aruba Networks ClearPass Policy Manager SQL注入漏洞

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager versions 6.10.x through 6.10.6 and 6.9.x through 6.9.11. An attacker could...

8.8CVSS8.1AI score0.00922EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.52 views

WordPress plugin NEX-Forms SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

8.8CVSS8AI score0.10977EPSS
Exploits5References5
OSV
OSV
added 2022/09/14 11:15 a.m.5 views

CVE-2022-37138

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form...

9.8CVSS5.8AI score0.00988EPSS
Exploits2References2
CNNVD
CNNVD
added 2022/09/12 12:0 a.m.5 views

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

7.5CVSS8AI score0.00815EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/09/08 12:0 a.m.22 views

PT-2022-24316 · Unknown · Interview Management System

Name of the Vulnerable Software and Affected Versions: Interview Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/interview/editQuestion.php" API endpoint. Recommendations: For...

7.2CVSS7.2AI score0.00843EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/08/25 12:0 a.m.6 views

PT-2022-23559 · Unknown · Ingredients Stock Management System

Name of the Vulnerable Software and Affected Versions: Ingredients Stock Management System version 1.0 Description: A SQL injection issue was found in the id parameter at the /classes/Master.php?f=delete category endpoint. Recommendations: For Ingredients Stock Management System version 1.0, avoi...

9.8CVSS9.5AI score0.00802EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.7 views

Interview Management System SQL注入漏洞

Interview Management System is an interview management system for janobe individual developers. A SQL injection vulnerability exists in version 1.0 of Interview Management System, which stems from some unknown handling code in /viewReport.php where entering a special string for the parameter id c...

9.8CVSS8.5AI score0.00625EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/08/02 3:15 a.m.2 views

CVE-2022-34950

Pharmacy Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at editproduct.php...

9.8CVSS6AI score0.00804EPSS
Exploits1References2
OSV
OSV
added 2022/07/26 1:15 p.m.5 views

CVE-2022-36161

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

9.8CVSS7.3AI score0.01038EPSS
Exploits1References1
OSV
OSV
added 2022/07/16 7:15 a.m.7 views

CVE-2017-20134

A vulnerability, which was classified as critical, has been found in Itech Freelancer Script 5.13. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument sk leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.7AI score0.00829EPSS
Exploits1References2
OSV
OSV
added 2022/06/16 6:15 p.m.7 views

CVE-2021-41487

NOKIA VitalSuite SPM 2020 is affected by SQL injection through UserName'...

9.8CVSS5.8AI score0.01678EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/14 12:0 a.m.7 views

Patient Records Management System SQL注入漏洞

Sourcecodester Hospital Patient Records Management System is a web-based application that provides an automated platform for hospitals to store and manage their patient records. sourcecodester Hospital Patient Records Management System is vulnerable to a SQL injection vulnerability that originate...

7.2CVSS6AI score0.00909EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/06/08 12:0 a.m.6 views

WordPress plugin Note Press SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Note Press plugin 0.1.10 and earlier versions are vulnerable to SQL injection, which stems...

4CVSS6.1AI score0.00764EPSS
Exploits2References3
CNNVD
CNNVD
added 2022/06/07 12:0 a.m.7 views

Neetai Tech SQL注入漏洞

Neetai Tech is a web development, GST software and accounting software from Neetai India.Neetai Tech is vulnerable to SQL injection, which can be exploited by attackers to cause sql injection issues via manipulation of the /product.php file...

9.8CVSS5.8AI score0.0062EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 4:15 p.m.4 views

CVE-2022-32015

Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=...

7.2CVSS7.2AI score0.04522EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.6 views

Badminton Center Management System SQL注入漏洞

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

7.2CVSS6AI score0.00946EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/13 3:15 p.m.4 views

CVE-2022-30387

Merchandise Online Store v1.0 is vulnerable to SQL Injection via /vloggersmerch/classes/Master.php?f=payorder...

9.8CVSS7.4AI score0.00874EPSS
Exploits0References2
CNNVD
CNNVD
added 2022/05/13 12:0 a.m.6 views

Merchandise Online Store SQL注入漏洞

Merchandise Online Store is a merchandise online store system. merchandise Online Store has a security vulnerability that can be exploited by attackers via /vloggersmerch/admin/orders/vieworder.php?view=user&id = SQL injection attack...

7.2CVSS7.3AI score0.00929EPSS
Exploits1References2
Rows per page
Query Builder