Lucene search
+L

6937 matches found

CNNVD
CNNVD
added 2024/08/01 12:0 a.m.4 views

SourceCodester Simple Realtime Quiz System 安全漏洞

SourceCodester Simple Realtime Quiz System is a real-time quiz system from SourceCodester, Inc. A security vulnerability exists in version 1.0 of the SourceCodester Simple Realtime Quiz System, which stems from an SQL injection vulnerability in the id parameter of the /managequiz.php file...

8.8CVSS7AI score0.0049EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.6 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.4 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.00551EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/31 11:15 a.m.7 views

CVE-2024-7320

A vulnerability classified as critical has been found in itsourcecode Online Blood Bank Management System 1.0. This affects an unknown part of the file /admin/index.php of the component Admin Login. The manipulation of the argument user leads to sql injection. It is possible to initiate the attac...

9.8CVSS5.7AI score0.00742EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/07/31 12:0 a.m.7 views

PT-2024-38228 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/ajax.php?action=login. The manipulation of the username argument leads to sql injection. This issue...

9.8CVSS7.6AI score0.0069EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.5 views

Xinhu RockOA SQL注入漏洞

Xinhu RockOA is an office OA system of China Xinhu Company. A SQL injection vulnerability exists in Xinhu RockOA version 2.6.2, which originates from the parameter nickName in the function dataAction /webmain/task/openapi/openmodhetongAction.php, which can lead to SQL injection...

8.8CVSS7AI score0.00514EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.9 views

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS7.3AI score0.00578EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.4 views

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS7.3AI score0.00619EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.3 views

Establishment Billing Management System 安全漏洞

Establishment Billing Management System is a billing management system by oretnom23 individual developer. A security vulnerability exists in Establishment Billing Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS6.8AI score0.00532EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/31 12:0 a.m.6 views

PT-2024-5757 · Unknown · Kraken Stress Testing Toolkit

Name of the Vulnerable Software and Affected Versions: Kraken Stress Testing Toolkit affected versions not specified Description: The issue is related to the lack of protection for the SQL query structure in the Kraken Stress Testing Toolkit, a tool for load testing SIEM systems. This can be...

9CVSS8.3AI score
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.6 views

The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce (formerly WOOF) of the WordPress content management system – relates to the failure to protect the SQL query structure. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the HUSKY plugin – Products Filter Professional for WooCommerce previously WOOF of the WordPress content management system – is related to the lack of protection for the SQL query structure when processing the woofauthor parameter. Exploiting this vulnerability allows an...

10CVSS5.6AI score0.19725EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/07/31 12:0 a.m.10 views

The vulnerability in the OpenResty web platform’s control panel for the Linux server 1Panel involves a lack of security measures regarding the SQL query structure. This allows attackers to execute arbitrary code and upload any files they desire.

The vulnerability of the OpenResty web platform’s control panel for the Linux server 1Panel relates to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code and upload arbitrary files...

10CVSS6.2AI score0.04528EPSS
SaveExploits2References4Affected Software2
ATTACKERKB
ATTACKERKB
added 2024/07/30 1:15 p.m.5 views

CVE-2024-6699

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection. This issue affects Mikafon MA7: from v3.0 before v3.1...

9.8CVSS5.6AI score0.00424EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.4 views

SiberianCMS SQL注入漏洞

SiberianCMS is an enterprise-level content management system that offers a variety of features for creating and managing web content. SiberianCMS suffers from a SQL injection vulnerability that originates from the system failing to properly neutralize special elements in SQL commands. The...

9.8CVSS8.3AI score0.00461EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.6 views

Hewlett Packard Enterprise ClearPass Policy Manager 安全漏洞

Hewlett Packard Enterprise ClearPass Policy Manager is a wireless network security access management system from Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise ClearPass Policy Manager that originates from a vulnerability that could allow an authenticate...

8.8CVSS7.8AI score0.00547EPSS
SaveExploits0References2
OSV
OSV
added 2024/07/29 7:15 p.m.7 views

CVE-2024-37858

SQL Injection vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the id parameter to php-lfis/admin/categories/managecategory.php...

9.8CVSS5.9AI score0.0078EPSS
SaveExploits2References3
OSV
OSV
added 2024/07/29 9:15 a.m.6 views

CVE-2024-7191

A vulnerability, which was classified as critical, has been found in itsourcecode Society Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/getbalance.php. The manipulation of the argument studentid leads to sql injection. The attack may be launched...

9.8CVSS5.7AI score0.00578EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.8 views

Complaints Report Management System SQL注入漏洞

Complaints Report Management System is a Complaints Report Management System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Complaints Report Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

8.8CVSS7AI score0.00532EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/29 12:0 a.m.6 views

PT-2024-11629 · Dropbox · Dropbox

Name of the Vulnerable Software and Affected Versions: Dropbox affected versions not specified Description: The issue concerns a SQL injection vulnerability. No specific details about the vulnerability, affected devices, or real-world incidents are provided. Recommendations: At the moment, there ...

8AI score
SaveExploits0References2
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.7 views

Society Management System SQL注入漏洞

Society Management System is itsourcecode open source a society management system. A SQL injection vulnerability exists in Society Management System version 1.0, which stems from an incorrect manipulation of the expensesid parameter that can lead to sql injection...

9.8CVSS7.2AI score0.00544EPSS
SaveExploits1References5
Rows per page
Query Builder