Lucene search
+L

15935 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•5 views

CVE-2024-44652: Improper Neutralization of Special Elements used in an SQL Command

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•28 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•22 views

PT-2025-47138

Name of the Vulnerable Software and Affected Versions g33kyrash Online-Banking-System affected versions not specified Description A SQL injection issue exists due to the manipulation of the Username argument. The issue affects unknown code within the /index.php file and is remotely exploitable. T...

7.5CVSS7.5AI score0.00302EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•22 views

CodeAstro Simple Inventory System SQL注入漏洞

CodeAstro Simple Inventory System is a simple inventory system from CodeAstro. CodeAstro Simple Inventory System version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter Username in the file /index.php of the component Login, which could lead ...

9.8CVSS7.8AI score0.00384EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•3 views

CVE-2025-13285: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Voting System 1.0. The affected element is an unknown function of the file /login.php. Such manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used...

9.8CVSS7AI score0.00415EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•29 views

PT-2025-47146

Name of the Vulnerable Software and Affected Versions itsourcecode Online Voting System version 1.0 Description A flaw exists in itsourcecode Online Voting System that allows for SQL injection. This issue stems from manipulating the Username parameter within an unknown function of the /login.php...

9.8CVSS6.9AI score0.00415EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•20 views

PT-2025-47145

Name of the Vulnerable Software and Affected Versions CodeAstro Simple Inventory System version 1.0 Description A flaw exists in CodeAstro Simple Inventory System 1.0 that allows for potential SQL injection. This issue is located within the Login component, specifically in the /index.php file...

9.8CVSS7.1AI score0.00384EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•23 views

itsourcecode Online Voting System SQL注入漏洞

Online Voting System is an online voting system. Online Voting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /login.php. An attacker can exploit this vulnerability to execute...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13280: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in CodeAstro Simple Inventory System 1.0. The impacted element is an unknown function of the file /index.php of the component Login. Executing a manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has bee...

9.8CVSS6.9AI score0.00384EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/17 12:00 a.m.•33 views

CVE-2024-44662

The PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection due to a lack of validation for externally entered SQL statements in the username parameter of the admin page. An attacker can exploit this flaw to execute illegal SQL commands, potentially leading to unauthorized access , d...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•23 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of an externally entered SQL statement in the username parameter of the admin page. An attacker can exploit this vulnerability to execute illegal SQL comman...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•5 views

CVE-2024-44662: Improper Neutralization of Special Elements used in an SQL Command

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

6.5CVSS5.8AI score0.0024EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/11/17 12:00 a.m.•30 views

CVE-2024-44652

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the useremail, username, userfirstname, userlastname, and useraddress parameters in userregister.php...

0.0024EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/11/17 12:00 a.m.•6 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

5.8AI score0.0024EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•23 views

PT-2025-47133

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0 that allows for SQL injection. The issue is related to the manipulation of the Username argument withi...

9.8CVSS6.8AI score0.00387EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•8 views

CVE-2025-13271: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•13 views

CVE-2025-13253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS6.4AI score0.00381EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•23 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter Username in the file...

8.8CVSS6.9AI score0.00381EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•21 views

CampCodes School Fees Payment Management System SQL注入漏洞

School Fees Payment Management System is a tuition payment management system. The School Fees Payment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement for the parameter Username in the file...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/11/17 12:00 a.m.•26 views

g33kyrash Online Banking System SQL注入漏洞

g33kyrash Online Banking System is an online banking system developed using PHP and MySQL by the individual developer of g33kyrash. A SQL injection vulnerability exists in g33kyrash Online Banking System, which stems from an incorrect manipulation of the parameter Username in the file /index.php,...

7.5CVSS7.8AI score0.00302EPSS
SaveExploits0References5
Rows per page
Query Builder