Lucene search
+L

88 matches found

Cvelist
Cvelist
added 2024/12/16 12:0 a.m.28 views

CVE-2024-55103

Online Nurse Hiring System v1.0 was discovered to contain a SQL injection vulnerability in the component /admin/profile.php via the fullname parameter...

0.0057EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.22 views

Kashipara E-learning Management System 跨站脚本漏洞

Kashipara E-learning Management System is a learning management system from Kashipara Inc. A cross-site scripting vulnerability exists in Kashipara E-learning Management System version 1.0, which is rooted in a stored cross-site scripting attack that allows remote attackers to execute arbitrary...

5.4CVSS6.5AI score0.00462EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/11/10 12:0 a.m.6 views

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Beauty Parlour Management System, which originates from the parameter adminname in the file...

9.8CVSS7.9AI score0.00628EPSS
SaveExploits1References5
OSV
OSV
added 2024/10/31 7:15 p.m.4 views

CVE-2024-51065

Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.6 views

Attendance and Payroll System 代码问题漏洞

Attendance and Payroll System is a PHP/MySQLi source code Attendance and Payroll System by oretnom23. A code issue vulnerability exists in Attendance and Payroll System version 1.0, which stems from an unrestricted file upload vulnerability in the image parameter of the /marimar/guest/update.php...

9.8CVSS6.7AI score0.00499EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/10/23 12:0 a.m.4 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter searchdata in the file /admin/search-medicalcard.php that can lea...

7.2CVSS5.8AI score0.0044EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/21 8:15 p.m.8 views

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

8.1CVSS5.8AI score0.00456EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/08/18 12:0 a.m.6 views

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH billing system project contains an administrator side. This PH Billing System project includes an administrator side where the...

9.8CVSS7.9AI score0.00582EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.6 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the id parameter of the...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.6 views

Best House Rental Management System 安全漏洞

Best House Rental Management System is a house rental management system by Mayuri K. Individual developer. A security vulnerability exists in Best House Rental Management System version 1.0. The vulnerability can be exploited to execute arbitrary code via the "House No" and "Description" paramete...

4.7CVSS7.7AI score0.00826EPSS
SaveExploits1References3
OSV
OSV
added 2024/06/17 9:15 p.m.5 views

CVE-2024-37798

Cross-site scripting XSS vulnerability in search-appointment.php in the Admin Panel in Phpgurukul Beauty Parlour Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the search input field...

5.9CVSS5.9AI score0.00349EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/12 12:0 a.m.6 views

PT-2024-32932 · Unknown · Kashipara College Management System

Name of the Vulnerable Software and Affected Versions: Kashipara College Management System version 1.0 Description: A critical issue affects the processing of the file submit new faculty.php, where the manipulation of the address argument leads to sql injection. The attack can be initiated...

8.8CVSS7.5AI score0.00803EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/04/10 12:0 a.m.7 views

Student Management System 安全漏洞

Student Management System is a simple web-based student management software by the individual developer Sk. Amir Hamza of Bangladesh. A security vulnerability exists in Complete Online Student Management System version 1.0, which is caused by a cross-site scripting vulnerability in the FirstRecor...

6.1CVSS4.5AI score0.00641EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/04/10 12:0 a.m.8 views

PT-2024-26484 · Unknown · Campcodes Church Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Church Management System version 1.0 Description: A problematic vulnerability has been found in the system, affecting an unknown part of the file /admin/admin user.php. The manipulation of the firstname argument leads to cross-site...

6.1CVSS4.3AI score0.00686EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2024/03/22 12:0 a.m.6 views

Online Marriage Registration System 跨站脚本漏洞

Online Marriage Registration System is a website builder that supports online marriage registration. A cross-site scripting vulnerability exists in Online Marriage Registration System version 1.0, which originates from a cross-site scripting XSS vulnerability in the parameter fromdate in file...

5.4CVSS4.4AI score0.00513EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/21 9:15 p.m.10 views

CVE-2024-2767

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated...

6.5CVSS5.7AI score0.00496EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/13 12:0 a.m.8 views

Computer Science Time Table System Security Vulnerability

Computer Science Time Table System is a computer science time table system. A security vulnerability exists in Code-projects Computer Science Time Table System version 1.0, which stems from an SQL injection vulnerability. The vulnerability can be exploited to run arbitrary code via...

7.8CVSS8.3AI score0.00347EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/08 12:0 a.m.6 views

Automated-Mess-Management-System Cross-Site Scripting Vulnerability

Automated-Mess-Management-System is an automated measurement management system by the individual developer Boyiddhanath Roy. A cross-site scripting vulnerability exists in Automated-Mess-Management-System version 1.0, which stems from the fact that incorrect manipulation of the parameter msg can...

6.1CVSS5.8AI score0.00465EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/12/20 12:0 a.m.13 views

PT-2023-31252 · Unknown · Book Store Management System

Name of the Vulnerable Software and Affected Versions: Book Store Management System version v1 Description: The issue allows attackers to access unauthorized pages and execute administrative functions without authenticating, due to incorrect access control. Recommendations: For Book Store...

9.8CVSS7.4AI score0.00963EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/12/07 12:0 a.m.5 views

PT-2023-27855 · Unknown · Student Information System

Name of the Vulnerable Software and Affected Versions: Student Information System version 1.0 Description: The issue allows an authenticated attacker to obtain Remote Code Execution on the server hosting the application through an Insecure File Upload vulnerability. This vulnerability is...

9.9CVSS8.8AI score0.01501EPSS
SaveExploits1References8
Rows per page
Query Builder