Lucene search
+L

283 matches found

Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2023-38056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any...

7.2CVSS5.6AI score0.0079EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2021-36095

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Malicious attacker is able to find out valid user logins by using the lost password feature. This issue affects: OTRS AG OTRS Community Edition version 6.0.1 an...

5.3CVSS6.2AI score0.00943EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2020-1778

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0...

4.3CVSS6AI score0.00643EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-21435

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Article Bcc fields and agent personal information are shown when customer prints the ticket PDF via external interface. This issue affects: OTRS AG OTRS 7.0.x...

6.5CVSS6.3AI score0.01273EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2025/07/04 7:23 a.m.106 views

Park

This project is used to study the...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/07/02 6:23 a.m.10 views

CVE-2025-6890

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS6.7AI score0.00325EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/07/02 6:23 a.m.9 views

CVE-2025-6889

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00399EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/30 6:15 a.m.14 views

CVE-2025-6890

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/30 6:15 a.m.8 views

CVE-2025-6890

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS0.00325EPSS
SaveExploits1References5
NVD
NVD
added 2025/06/30 6:15 a.m.16 views

CVE-2025-6889

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00399EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/30 6:15 a.m.9 views

CVE-2025-6889

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/06/30 6:2 a.m.17 views

CVE-2025-6890 code-projects Movie Ticketing System ticketConfirmation.php sql injection

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...

6.5CVSS0.00325EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/30 6:2 a.m.23 views

CVE-2025-6890

CVE-2025-6890 affects code-projects Movie Ticketing System 1.0. The vulnerability is an SQL injection in the /ticketConfirmation.php file caused by manipulation of the Date argument. Impact is described as high for confidentiality, integrity, and availability. The issue can be exploited remotely,...

8.8CVSS6.8AI score0.00325EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/30 6:2 a.m.3 views

CVE-2025-6890 code-projects Movie Ticketing System ticketConfirmation.php sql injection

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /ticketConfirmation.php. The manipulation of the argument Date leads to sql injection. The attack may be initiated remotely. The exploit has...

6.5CVSS7.6AI score0.00325EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/06/30 5:32 a.m.5 views

CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.8AI score0.00399EPSS
SaveExploits1References5
CVE
CVE
added 2025/06/30 5:32 a.m.30 views

CVE-2025-6889

CVE-2025-6889 affects code-projects Movie Ticketing System 1.0. The vulnerability is in the file /logIn.php where manipulating the parameter postName triggers a SQL injection . Exploitation is described as remote with a publicly disclosed exploit, indicating potential active risk. NVD lists a CVS...

9.8CVSS7.5AI score0.00399EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/30 5:32 a.m.20 views

CVE-2025-6889 code-projects Movie Ticketing System logIn.php sql injection

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS0.00399EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/06/30 12:0 a.m.5 views

PT-2025-27414 · Code Projects · Code-Projects Movie Ticketing System

Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue affects the processing of the file "/ticketConfirmation.php". The manipulation of the Date argument leads to SQL injection. The attack may be initiated remotely...

8.8CVSS8.3AI score0.00325EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.5 views

Code-Projects Movie Ticketing System 注入漏洞

Code-Projects Movie Ticketing System is Code-Projects open source movie ticketing system. Code-Projects Movie Ticketing System version 1.0 suffers from an injection vulnerability that originates from a SQL injection due to a misuse of the parameter postName in the file /logIn.php...

9.8CVSS7.8AI score0.00399EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/06/30 12:0 a.m.10 views

PT-2025-27408 · Unknown · Code-Projects Movie Ticketing System

Name of the Vulnerable Software and Affected Versions: code-projects Movie Ticketing System version 1.0 Description: A critical issue has been discovered, affecting the /logIn.php file. The manipulation of the postName argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS7.5AI score0.00399EPSS
SaveExploits1References12
Rows per page
Query Builder