Lucene search
+L

2407 matches found

CNNVD
CNNVD
added 2024/08/14 12:0 a.m.7 views

Simple Online Bidding System SQL注入漏洞

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to sql injection...

9.8CVSS8AI score0.00661EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/08/08 12:0 a.m.5 views

PT-2024-29316 · Unknown · Kashipara Responsive School Management System

Name of the Vulnerable Software and Affected Versions: Kashipara Responsive School Management System version 1.0 Description: A SQL injection issue allows an attacker to execute arbitrary SQL commands via the username parameter in the /smsa/student login.php endpoint. This can lead to data theft...

5.3CVSS8.6AI score0.00406EPSS
SaveExploits1References6
OSV
OSV
added 2024/08/07 7:15 p.m.4 views

CVE-2024-41237

A SQL injection vulnerability in /smsa/teacherlogin.php in Kashipara Responsive School Management System v1.0 allows an attacker to execute arbitrary SQL commands via the "username" parameter...

9.8CVSS6.1AI score0.00592EPSS
SaveExploits1References2
CVE
CVE
added 2024/08/06 11:55 a.m.40 views

CVE-2024-33971

CVE-2024-33971 describes an SQL injection vulnerability in the PayPal, Credit Card and Debit Card Payment software (version 1.0, janobe products) where an attacker can exploit the username parameter passed to the /login.php endpoint to retrieve data. Documents consistently tie this to SQL injecti...

9.8CVSS9.6AI score0.0041EPSS
SaveExploits0References1Affected Software5
OSV
OSV
added 2024/08/06 3:15 a.m.6 views

CVE-2024-7498

A vulnerability was found in itsourcecode Airline Reservation System 1.0. It has been classified as critical. Affected is the function login/login2 of the file /admin/login.php of the component Admin Login Page. The manipulation of the argument username leads to sql injection. It is possible to...

9.8CVSS5.6AI score0.00655EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/08/06 12:0 a.m.7 views

PT-2024-25603 · Payment · Payment

Name of the Vulnerable Software and Affected Versions: Payment software version 1.0 Description: The issue allows an attacker to exploit a SQL injection vulnerability by sending a specially crafted query to the server, potentially retrieving all stored information through the username parameter i...

9.8CVSS7.8AI score0.0041EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/08/06 12:0 a.m.8 views

itsourcecode Airline Reservation System SQL注入漏洞

itsourcecode Airline Reservation System is an airline reservation system from itsourcecode, Inc. A SQL injection vulnerability exists in version 1.0 of itsourcecode Airline Reservation System, which stems from an incorrect manipulation of the parameter username that can lead to sql injection...

9.8CVSS8AI score0.00655EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/03 8:15 p.m.6 views

CVE-2024-7444

A vulnerability classified as critical was found in itsourcecode Ticket Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be launche...

9.8CVSS5.6AI score0.00646EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/03 12:0 a.m.5 views

Ticket Reservation System SQL注入漏洞

Ticket Reservation System is itsourcecode open source ticket reservation system. A SQL injection vulnerability exists in Ticket Reservation System version 1.0, which originates from a SQL injection vulnerability in the username parameter of the Login Page component of the login.php file...

9.8CVSS7.6AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/01 9:16 p.m.8 views

CVE-2024-7366

A vulnerability was found in SourceCodester Tracking Monitoring Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?action=login of the component Login. The manipulation of the argument username leads to sql injection. It is possible to...

9.8CVSS5.7AI score0.00646EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/01 12:0 a.m.6 views

SourceCodester Tracking Monitoring Management System SQL注入漏洞

SourceCodester Tracking Monitoring Management System is a monitoring management system from SourceCodester Inc. A SQL injection vulnerability exists in the SourceCodester Tracking Monitoring Management System version 1.0, which is caused by an SQL injection vulnerability in the username parameter...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/07/31 12:0 a.m.7 views

PT-2024-38228 · Sourcecodester · Sourcecodester Lot Reservation Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Lot Reservation Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/ajax.php?action=login. The manipulation of the username argument leads to sql injection. This issue...

9.8CVSS7.6AI score0.0069EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.4 views

SourceCodester Lot Reservation Management System SQL注入漏洞

SourceCodester Lot Reservation Management System is a parking lot reservation management system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Lot Reservation Management System version 1.0, which stems from an incorrect manipulation of the username parameter that can...

9.8CVSS8.1AI score0.0069EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/31 12:0 a.m.7 views

Establishment Billing Management System SQL注入漏洞

Establishment Billing Management System is a billing management system by oretnom23 Individual Developer. An SQL injection vulnerability exists in the Establishment Billing Management System version 1.0, which stems from an incorrect operation of the username parameter that can lead to sql...

9.8CVSS8AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/30 6:15 a.m.6 views

CVE-2024-7219

A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.9AI score0.00788EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/07/30 12:0 a.m.7 views

PT-2024-38179

Name of the Vulnerable Software and Affected Versions: SourceCodester School Log Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/ajax.php?action=login. The manipulation of the username argument leads to SQL...

9.8CVSS7.2AI score0.00788EPSS
SaveExploits1References9
OSV
OSV
added 2024/07/29 11:15 a.m.7 views

CVE-2024-7195

A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/checkadmin.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS6.4AI score0.00544EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.7 views

Society Management System SQL注入漏洞

Society Management System is itsourcecode open source a social management system. Society Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter username in the file /admin/checkadmin.php can lead to SQL injection...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/28 12:0 a.m.6 views

SourceCodester School Fees Payment System 安全漏洞

SourceCodester School Fees Payment System is a school fees payment system. A security vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System due to an SQL injection vulnerability in the username parameter of the /ajax.php?action=login file...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/19 4:15 a.m.4 views

CVE-2024-6898

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.8AI score0.00604EPSS
SaveExploits1References4
Rows per page
Query Builder