Lucene search
+L

2961 matches found

CVE
CVE
•added 2025/08/08 12:00 a.m.•45 views

CVE-2025-50927

Easy Hosting Control Panel (EHCP ) version 20.04.1.b is vulnerable to a reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function . The root cause is an unfiltered ftpusername parameter, which allows authenticated attackers to inject and execute arbitrary JavaScript. Po...

6.3CVSS5.5AI score0.00198EPSS
SaveExploits2References2Affected Software1
NVD
NVD
•added 2025/08/07 6:15 p.m.•17 views

CVE-2023-41524

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

8.8CVSS0.00302EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/08/07 12:00 a.m.•13 views

Student Attendance Management System 安全漏洞

Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a SQL injection due to incorrect manipulation of the username parameter in the fi...

8.8CVSS7.7AI score0.00302EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/07 12:00 a.m.•2 views

CVE-2023-41524: Improper Neutralization of Special Elements used in an SQL Command

Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...

8.8CVSS5.8AI score0.00302EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/08/05 7:31 p.m.•149 views

Exploit for CVE-2025-8550

CVE-2025-8550 – atjiu pybbs XSS Exploit Description This...

4.8CVSS4.4AI score0.00651EPSS
SaveExploits3
CNNVD
CNNVD
•added 2025/08/05 12:00 a.m.•18 views

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Username in the file /admin/comment/list, which could lead to a cross-site scripting...

5.4CVSS4.8AI score0.00268EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/08/05 12:00 a.m.•17 views

pybbs 代码注入漏洞

pybbs is a community platform for Java development by iuiu individual developers. A code injection vulnerability exists in pybbs 6.0.0 and earlier versions, which stems from improper handling of the parameter Username in the file /admin/topic/list, which could lead to a cross-site scripting attac...

5.4CVSS4AI score0.00651EPSS
SaveExploits3References8
OSV
OSV
•added 2025/08/03 2:15 a.m.•13 views

CVE-2025-8495

A vulnerability, which was classified as critical, was found in code-projects Intern Membership Management System 1.0. Affected is an unknown function of the file /admin/editadminquery.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack...

9.8CVSS5.7AI score0.0051EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/08/03 12:00 a.m.•26 views

Code-Projects Intern Membership Management System 注入漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. Code-Projects Intern Membership Management System version 1.0 suffers from an injection vulnerability, which originates from a SQL injection due to incorrect operation of the...

9.8CVSS7.8AI score0.0051EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/08/02 8:22 p.m.•16 views

CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.6AI score0.00517EPSS
SaveExploits1References1
OSV
OSV
•added 2025/08/02 11:15 a.m.•16 views

CVE-2025-8467

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /controllers/regcontrol.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00454EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/08/02 12:00 a.m.•21 views

Code-Projects Wazifa System 注入漏洞

Code-Projects Wazifa System is a Code-Projects open source content management system. An injection vulnerability exists in Code-Projects Wazifa System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file /controllers/regcontrol.php...

9.8CVSS7.7AI score0.00454EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/08/01 12:00 a.m.•19 views

Code-Projects Online Medicine Guide 注入漏洞

Online Medicine Guide is an online medical guide. Online Medicine Guide suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter uname in the file /login.php. The vulnerability can be exploited by an attacker to execute...

9.8CVSS8.2AI score0.00518EPSS
SaveExploits1References6
NVD
NVD
•added 2025/07/31 3:15 p.m.•30 views

CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS0.00517EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/07/31 2:53 p.m.•6 views

CVE-2013-10036 Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.6AI score0.00517EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/07/31 2:53 p.m.•29 views

CVE-2013-10036 Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCWBTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS0.00517EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/07/31 12:00 a.m.•23 views

PT-2025-31534 · Undefined · Undefined

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler SEH,...

8.4CVSS7.7AI score0.00517EPSS
SaveExploits1References5
OSV
OSV
•added 2025/07/30 9:15 p.m.•21 views

CVE-2025-8332

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an unknown function of the file /register.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00415EPSS
SaveExploits1References5
CNVD
CNVD
•added 2025/07/30 12:00 a.m.•20 views

Pre-School Enrollment System SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the /admin/password-recovery.php file not adequately validating the username parameter. An attacker can exploit this...

6.5CVSS8AI score0.00204EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/30 12:00 a.m.•18 views

code-projects Online Farm System 注入漏洞

Online Farm System is an online farm system. Online Farm System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Username in the file /register.php. An attacker can exploit this vulnerability to execute...

9.8CVSS8.2AI score0.00415EPSS
SaveExploits1References5
Rows per page
Query Builder