Lucene search
+L

447 matches found

NVD
NVD
•added 2023/11/07 9:15 p.m.•32 views

CVE-2023-46785

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the partnerpreference.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS0.00831EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/11/07 9:10 p.m.•25 views

CVE-2023-46793 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'day' parameter in the 'register' function of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00831EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/07 9:02 p.m.•39 views

CVE-2023-46789 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00831EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/11/07 9:02 p.m.•26 views

CVE-2023-46789 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'filename' attribute of the 'pic1' multipart parameter of the functions.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00831EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/11/07 8:59 p.m.•18 views

CVE-2023-46787 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00831EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/07 8:59 p.m.•34 views

CVE-2023-46787 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00831EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/07 8:37 p.m.•52 views

CVE-2023-46679 Online Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtunameemail' parameter of the index.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00831EPSS
SaveExploits1References2
CVE
CVE
•added 2023/11/07 8:36 p.m.•53 views

CVE-2023-46678

This CVE entry is rejected/not used and does not represent an active vulnerability.

6.9AI score
SaveExploits0
CVE
CVE
•added 2023/11/07 8:35 p.m.•57 views

CVE-2023-46677

CVE-2023-46677 affects Online Job Portal v1.0. The vulnerability is described as multiple unauthenticated SQL injection flaws caused by the sign‑up.php resource not validating characters in the txt_uname parameter before sending data to the database. The CVSS metrics in the initial document class...

9.8CVSS10AI score0.00831EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•12 views

PT-2023-30221 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the email parameter in the register function of the functions.php file is vulnerable. Recommendations: For...

7.5AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•16 views

PT-2023-30215 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the username parameter of the "auth/auth.php" resource does not validate the characters received and they are...

9.8CVSS10AI score0.00831EPSS
SaveExploits1References3
NCSC
NCSC
•added 2023/11/07 12:00 a.m.•15 views

Vulnerabilities fixed in Veeam ONE

Veeam has fixed vulnerabilities in Veeam ONE. A malicious person can exploit the vulnerabilities to launch attacks that can lead to the following categories of damage: Cross-Site Scripting XSS. Remote code execution Administrator/Root rights Remote code execution User rights Access to sensitive...

9.9CVSS7.9AI score0.19125EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•15 views

PT-2023-30219 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the filename attribute of the pic4 multipart parameter is vulnerable. Recommendations: For Online Matrimonial...

7.4AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/11/07 12:00 a.m.•12 views

PT-2023-30224 · Unknown · Online Matrimonial Project

Name of the Vulnerable Software and Affected Versions: Online Matrimonial Project version 1.0 Description: The issue concerns Unauthenticated SQL Injection vulnerabilities. Specifically, the name parameter in the register function of the functions.php file is vulnerable. Recommendations: For Onli...

7.7AI score
SaveExploits0References4
NVD
NVD
•added 2023/11/02 3:15 p.m.•38 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/02 3:15 p.m.•14 views

CVE-2023-45338

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the routers/add-ticket.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/02 3:15 p.m.•29 views

CVE-2023-45345

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'deleted' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/02 3:15 p.m.•16 views

CVE-2023-45347

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'verified' parameter of the routers/user-router.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
OSV
OSV
•added 2023/11/02 2:15 p.m.•15 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
NVD
NVD
•added 2023/11/02 2:15 p.m.•35 views

CVE-2023-45343

Online Food Ordering System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'ticketid' parameter of the routers/ticket-message.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.007EPSS
SaveExploits1References2
Rows per page
Query Builder