Lucene search
+L

50 matches found

OSV
OSV
added 2023/08/08 1:15 p.m.7 views

CVE-2023-4219

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. T...

7.5CVSS5.7AI score0.00669EPSS
SaveExploits1References3
NVD
NVD
added 2022/08/31 8:15 p.m.25 views

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

7.5CVSS0.00788EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/31 8:15 p.m.7 views

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

7.5CVSS5.8AI score0.00788EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.9 views

PT-2022-19010 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Gym Management System, affecting the file login.php. The manipulation of the user email argument leads to...

9.8CVSS9.7AI score0.00712EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.24 views

Electronic Medical Records System SQL注入漏洞

Electronic Medical Records System is an electronic medical records system. Electronic Medical Records System suffers from a SQL injection vulnerability that stems from an unknown function of its POST request handler that operates on the parameter useremail to cause sql injection. The attack metho...

9.8CVSS8.4AI score0.00625EPSS
SaveExploits1References3
OSV
OSV
added 2021/12/27 11:15 a.m.3 views

CVE-2021-24980

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwollegbuseremail parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2021/10/29 4:15 p.m.5 views

CVE-2021-41674

An SQL Injection vulnerability exists in Sourcecodester E-Negosyo System 1.0 via the useremail parameter in /admin/login.php...

9.8CVSS7.4AI score0.01684EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/10/29 12:0 a.m.7 views

Pharmacy Point Of Sale System SQL注入漏洞

Pharmacy Point Of Sale System is a web-based application by Carlo Montero, an individual developer. It is used to help a pharmacy manage its sales transactions. A SQL injection vulnerability exists in Pharmacy Point of Sale System version 1.0, which can be exploited via the useremail parameter in...

9.8CVSS8.6AI score0.01684EPSS
SaveExploits1References4
OSV
OSV
added 2007/09/26 10:17 p.m.6 views

CVE-2007-5105

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...

5.8AI score
SaveExploits0References6
OSV
OSV
added 2007/09/26 10:17 p.m.7 views

DEBIAN-CVE-2007-5105

Cross-site scripting XSS vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the useremail parameter...

4.3CVSS6AI score0.04381EPSS
SaveExploits1References1
Rows per page
Query Builder