Lucene search
+L

6196 matches found

CNNVD
CNNVD
•added 2024/12/29 12:00 a.m.•21 views

PHPGurukul Complaint Management System Injection Vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from an SQL injection vulnerability that stems from a lack of sufficient validation of the input of the state parameter in the /admin/category.php file. No details of the vulnerability are available ...

9.8CVSS8AI score0.00789EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/29 12:00 a.m.•20 views

Codezips Event Management System injection vulnerability

Codezips Event Management System is an open source event management system from Codezips. An injection vulnerability exists in Codezips Event Management System version 1.0, which stems from an incorrect manipulation of the parameter title that can lead to SQL injection...

9.8CVSS7.1AI score0.00751EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/12/26 9:15 a.m.•17 views

CVE-2024-12943

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be...

9.8CVSS5.7AI score0.00683EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2024/12/26 6:15 a.m.•23 views

CVE-2024-12938

A vulnerability has been found in code-projects Simple Admin Panel 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file updateOrderStatus.php. The manipulation of the argument record leads to sql injection. The attack can be launched remotely. The...

9.1CVSS5.8AI score0.00538EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•17 views

PT-2024-9923 · Unknown · Job Recruitment

Name of the Vulnerable Software and Affected Versions: Job Recruitment version 1.0 Description: A critical vulnerability has been found in the function fln update of the file / parse/ all edits.php. The issue is related to the lack of neutralization of special elements when processing the...

9.8CVSS8.1AI score0.00643EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•18 views

Code-Projects Simple Admin Panel Security Vulnerabilities

Code-Projects Simple Admin Panel is a simple admin panel for Code-Projects open source. A security vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from a SQL injection vulnerability in the record parameter of the catDeleteController.php file...

9.8CVSS7AI score0.00594EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•13 views

CodeAstro Blood Donor Management System Injection Vulnerability

CodeAstro Blood Donor Management System is a blood donor management system from CodeAstro. An injection vulnerability exists in CodeAstro Blood Donor Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

8.8CVSS7AI score0.00479EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•22 views

Code-Projects Simple Admin Panel Security Vulnerabilities

Code-Projects Simple Admin Panel is a simple admin panel for Code-Projects open source. A security vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from a qty parameter SQL injection vulnerability in the addVariationController.php file...

8.8CVSS7AI score0.00567EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•14 views

1000 Projects Portfolio Management System MCA Injection Vulnerability

1000 Projects Portfolio Management System MCA is an open source portfolio management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Portfolio Management System MCA version 1.0, which stems from a parameter q in the file /updateedudetails.php that can lead to SQL...

9.8CVSS7.9AI score0.00789EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•16 views

1000 Projects Portfolio Management System MCA Injection Vulnerability

1000 Projects Portfolio Management System MCA is an open source portfolio management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Portfolio Management System MCA version 1.0, which stems from an incorrect manipulation of the parameter username/password that can le...

9.8CVSS7.7AI score0.00683EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•15 views

Code-Projects Simple Car Rental System security vulnerabilities

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from an incorrect manipulation of the parameter email/pass that can lead to sql injection...

9.8CVSS7.5AI score0.00683EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2024/12/25 12:00 a.m.•16 views

Apache Traffic Control PUT Request Handler Code Execution

The vulnerability of the PUT Request Handler component in the Apache Traffic Control system for building CDN networks is related to the lack of measures taken to protect the SQL request structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing...

9.9CVSS9.2AI score0.42227EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2024/12/25 12:00 a.m.•16 views

Codezips Project Management System injection vulnerability

Codezips Project Management System is a project management system that provides project management, task assignment and other features. A SQL injection vulnerability exists in the /pages/forms/advanced.php file in Codezips Project Management System version 1.0, which stems from insufficient...

8.8CVSS7.9AI score0.00545EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/23 12:00 a.m.•14 views

PT-2024-36674 · Vibebp · Vibebp

Name of the Vulnerable Software and Affected Versions: VibeBP versions prior to 1.9.9.7.7 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations: For...

9.3CVSS9.9AI score0.00606EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2024/12/22 12:00 a.m.•18 views

Code-Projects Online Exam Mastering System Injection Vulnerabilities

Code-Projects Online Exam Mastering System is a Code-Projects open source online exam system. An injection vulnerability exists in code-projects Online Exam Mastering System version 1.0, which is caused by an SQL injection into the parameter eid...

8.8CVSS7AI score0.00545EPSS
SaveExploits1References6
CNVD
CNVD
•added 2024/12/20 12:00 a.m.•18 views

Online Class and Exam Scheduling System subject_update.php File SQL Injection Vulnerability

Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that stems from a lack of validation of externally-entered SQL statements in the parameter id of file...

8.8CVSS8.3AI score0.00574EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/12/19 2:15 p.m.•11 views

CVE-2024-10244

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in ISDO Software Web Software allows SQL Injection. This issue affects Web Software: before 3.6...

9.8CVSS7.5AI score0.00524EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/12/19 12:00 a.m.•17 views

PT-2024-17738 · Unknown · Codezips Technical Discussion Forum

Name of the Vulnerable Software and Affected Versions: Codezips Technical Discussion Forum version 1.0 Description: A critical issue affects some unknown functionality of the file signinpost.php. The manipulation of the username argument leads to SQL injection. The attack may be launched remotely...

9.8CVSS8.1AI score0.00791EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/12/19 12:00 a.m.•20 views

PT-2024-17734

Name of the Vulnerable Software and Affected Versions itsourcecode Vehicle Management System version 1.0 Description A critical issue has been found in the itsourcecode Vehicle Management System, affecting an unknown function of the file editbill.php. The manipulation of the id argument leads to...

9.8CVSS6.4AI score0.00579EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2024/12/19 12:00 a.m.•21 views

1000 Projects Attendance Tracking Management System: Injection Vulnerabilities

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Attendance Tracking Management System version 1.0, which originates from an SQL injection vulnerability in the studentemailid...

9.8CVSS7.8AI score0.00681EPSS
SaveExploits0References5
Rows per page
Query Builder