Lucene search
+L

6937 matches found

CNNVD
CNNVD
added 2025/08/08 12:0 a.m.9 views

Wanzhou WOES Intelligent Optimization Energy Saving System 注入漏洞

Wanzhou WOES Intelligent Optimization Energy Saving System is an Intelligent Optimization Energy Saving System from the Chinese company Wanzhou. An injection vulnerability exists in version 1.0 of the Wanzhou WOES Intelligent Optimization Energy Saving System, which is caused by incorrect operati...

8.8CVSS7.1AI score0.00332EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:0 a.m.16 views

The vulnerability of FortiWeb web applications’ network firewalls, related to the lack of protective measures for SQL query structures, allows attackers to disclose protected information.

The vulnerability of FortiWeb web applications’ network firewalls is related to the lack of security measures for SQL query structures. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

4CVSS5.5AI score0.00399EPSS
SaveExploits0References3Affected Software1
Gitee
Gitee
added 2025/08/07 9:7 p.m.120 views

网络安全

Based on the provided context, I will analyze the repository and create a concise paragraph of 5-7 sentences. This repository appears to be a Burp Suite extension for fast JSON scanning, version 2.2.2, built for JDK 1.8. The extension is designed to scan JSON data in Burp's proxy history and...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2025/08/05 12:0 a.m.8 views

The vulnerability of the WeGIA web manager’s script /html/saude/profile_paciente.php, which allows a hacker to disclose confidential information

The vulnerability of the WeGIA web manager’s script /html/saude/profilepaciente.php is related to the failure to protect the SQL query structure when processing the parameter idfuncionario. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose confidential informati...

9.9CVSS5.6AI score0.00371EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:0 a.m.16 views

The vulnerability of the WeGIA web manager for charitable organizations stems from the failure to implement measures to protect the SQL query structure, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the WeGIA web manager for charitable organizations is related to the failure to implement measures to protect the SQL query structure when processing the id parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to...

7.8CVSS5.6AI score0.00418EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/04 12:0 a.m.11 views

The vulnerability of the WeGIA web manager, related to the failure to protect the SQL query structure, allows attackers to execute arbitrary SQL code.

The vulnerability of the WeGIA web manager is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code remotely...

10CVSS6AI score0.00457EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/08/03 12:0 a.m.10 views

Code-Projects Online Medicine Guide 注入漏洞

Code-Projects Online Medicine Guide is an online medicine guide from Code-Projects open source. An injection vulnerability exists in Code-Projects Online Medicine Guide version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter Search in the file...

9.8CVSS7.8AI score0.0059EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.6 views

Code-Projects Online Medicine Guide 注入漏洞

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter uname in the file /login.php. The vulnerability can be exploited by an attacker to execute...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/08/01 12:0 a.m.7 views

Vehicle Management edit1.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter sno in the file /edit1.php. An attacker can exploit this vulnerability to execute illegal S...

9.8CVSS8.3AI score0.00498EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/08/01 12:0 a.m.8 views

Code-Projects Wazifa System 注入漏洞

Wazifa System is a content management system. Wazifa System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Password in the file /controllers/updatesettings.php. An attacker can use this vulnerability to...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/08/01 12:0 a.m.5 views

WordPress Smart Slider plugin SQL Injection Vulnerability

WordPress Smart Slider plugin is a powerful WordPress plugin that is mainly used to create responsive slideshows/sliders that support images, videos, posts and other forms of content presentation. WordPress Smart Slider plugin suffers from a SQL injection vulnerability that stems from the...

4.9CVSS8.2AI score0.00367EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/08/01 12:0 a.m.6 views

Vehicle Management /filter3.php File SQL Injection Vulnerability

Vehicle Management is a vehicle management system. Vehicle Management suffers from an SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the parameter company in file /filter3.php. An attacker can exploit this vulnerability to execute illega...

9.8CVSS8.2AI score0.00648EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/31 3:15 p.m.6 views

CVE-2025-8408

A vulnerability, which was classified as critical, was found in code-projects Vehicle Management 1.0. Affected is an unknown function of the file /filter1.php. The manipulation of the argument vehicle leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00525EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.8 views

Projectworlds Online Admission System 安全漏洞

Online Admission System is an online admission system. The Online Admission System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter ID of the file /adminac.php. An attacker can exploit this vulnerability to...

9.8CVSS8.1AI score0.00396EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.5 views

CloudClassroom-PHP-Project 安全漏洞

CloudClassroom-PHP-Project is a cloud classroom website by the individual developer Vishal Mathur. A security vulnerability exists in CloudClassroom-PHP-Project version 1.0, which stems from SQL injection and could lead to database manipulation...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.7 views

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter company in the file /addcompany.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.1AI score0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/31 12:0 a.m.9 views

Code-Projects Vehicle Management 注入漏洞

Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter from in the file /filter.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.2AI score0.00421EPSS
SaveExploits1References5
OSV
OSV
added 2025/07/30 10:15 p.m.7 views

CVE-2025-8334

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

9.8CVSS5.8AI score0.00396EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/30 12:0 a.m.6 views

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/deletes8.php. An attacker can exploit this vulnerability to execute illegal SQL commands...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/29 12:0 a.m.10 views

PuneethReddyHc Online Shopping System Advanced 安全漏洞

PuneethReddyHc Online Shopping System Advanced is an open source online shopping system from the individual developers at Puneeth Reddy HC in India. A security vulnerability exists in PuneethReddyHc Online Shopping System Advanced version 1.0, which stems from improper cleaning of the keyword...

7.7CVSS7.5AI score0.00249EPSS
SaveExploits2References4
Rows per page
Query Builder