Lucene search
+L

7223 matches found

CNVD
CNVD
•added 2025/06/27 12:00 a.m.•26 views

Student Record system Using PHP and MySQL SQL Injection Vulnerability

Student Record system Using PHP and MySQL is a student record system based on php and mysql. A SQL injection vulnerability exists in Student Record system Using PHP and MySQL, which stems from the lack of validation of externally entered SQL statements for variables $cshortname, $cfullname, and...

7.1CVSS8.3AI score0.00322EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/06/27 12:00 a.m.•15 views

WordPress plugin LifterLMS SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

9.8CVSS7.5AI score0.00356EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/06/27 12:00 a.m.•10 views

Simple Pizza Ordering System addmem.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8AI score0.00487EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/26 12:00 a.m.•12 views

PHPGurukul Dairy Farm Shop Management System 安全漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . Dairy Farm Shop Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in manage-companies.php. No details of the vulnerability...

8CVSS8AI score0.00444EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/06/26 12:00 a.m.•19 views

OpenNMS Horizon 安全漏洞

OpenNMS Horizon is an open source solution from OpenNMS, Inc. that helps you visualize and monitor everything on your local and remote networks. A security vulnerability exists in OpenNMS Horizon that stems from improper neutralization of special elements in SQL commands, which could lead to SQL...

6.9CVSS7.2AI score0.00242EPSS
SaveExploits0References2
OSV
OSV
•added 2025/06/25 3:15 p.m.•17 views

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

7.1CVSS5.9AI score0.00322EPSS
SaveExploits0References2
CNVD
CNVD
•added 2025/06/25 12:00 a.m.•11 views

SQL Injection Vulnerability in ERP System of Shenzhen Mingyuan Cloud Technology Co.

The ERP system is a comprehensive information management platform that integrates the functions of housing, customers, sales, finance and human resources. ERP system of Shenzhen Mingyuan Cloud Technology Co., Ltd. suffers from SQL injection vulnerability, which can be exploited by attackers to...

7.6AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•15 views

Code-Projects Inventory Management System 注入漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter brandStatus of file /phpaction/createBrand.php. An attacker can...

9.8CVSS8.2AI score0.00481EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/25 12:00 a.m.•14 views

itsourcecode Employee Management System 注入漏洞

itsourcecode Employee Management System is itsourcecode open source employee management system. An injection vulnerability exists in itsourcecode Employee Management System version 1.0, which stems from improper handling of the parameter FirstName in the file /admin/editempprofile.php, which can...

7.2CVSS5.7AI score0.00403EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2025/06/25 12:00 a.m.•17 views

The vulnerability of the customerview.php file in the tailoring management system allows a hacker to execute arbitrary SQL code.

The vulnerability of the customerview.php file in the tailoring management system is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code...

10CVSS7.5AI score0.01092EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2025/06/24 8:15 p.m.•15 views

CVE-2025-49853

ControlID iDSecure On-premises versions 4.7.48.0 and prior are vulnerable to SQL injections which could allow an attacker to leak arbitrary information and insert arbitrary SQL syntax into SQL queries...

9.3CVSS5.9AI score0.00482EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/06/24 12:12 p.m.•11 views

WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by ch4r0n in WordPress Plugin GG Bought Together for WooCommerce versions = 1.0.2...

9.3CVSS8AI score0.00398EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2025/06/24 12:00 a.m.•18 views

Control iD iDSecure On-premises 注入漏洞

Control iD iDSecure On-premises is an access control software from Control iD, a Brazilian company, used to manage personnel and vehicle access. A SQL injection vulnerability exists in Control iD iDSecure On-premises version 4.7.48.0 and prior versions, which originates from SQL injection and cou...

9.3CVSS7.9AI score0.00482EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•16 views

Nipah virus Testing Management System /bwdates-report-ds.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

8.8CVSS8.3AI score0.00418EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•11 views

SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-2025-17850)

T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...

8AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/06/23 12:00 a.m.•12 views

Code-Projects Inventory Management System 安全漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the editCategoriesName parameter in the /phpaction/editCategories.php file for externally entered SQL statements. An...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/23 12:00 a.m.•13 views

Code-Projects Inventory Management System 安全漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the userid parameter in the /phpaction/changePassword.php file against an externally entered SQL statement. An...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•14 views

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter imageid in the file /admin/changepropic.php. An attacker...

8.8CVSS8.2AI score0.00452EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•15 views

PHPGurukul Art Gallery Management System 注入漏洞

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editid in the file /admin/changeimage.php. An attacker can...

8.8CVSS8.2AI score0.00452EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•15 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter firstname in the file...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References5
Rows per page
Query Builder