Lucene search
+L

2407 matches found

Cvelist
Cvelist
added 2024/03/07 1:10 p.m.24 views

CVE-2024-2245 Cross-Site Scripting vulnerability in moziloCMS

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

5.4CVSS5.6AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/07 12:0 a.m.15 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8.1AI score0.00569EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.6 views

PT-2024-12914 · Unknown · Code-Projects.Org Online Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects.org Online Job Portal version 1.0 Description: The issue concerns SQL Injection via the Username parameter for "Employer." This allows for potential exploitation. Recommendations: For code-projects.org Online Job Portal version...

9.8CVSS8.1AI score0.00569EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.8 views

Online Job Portal Security Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A security vulnerability exists in Online Job Portal, which is caused by an SQL injection attack via the Username parameter of "Employer"...

9.8CVSS7.9AI score0.00569EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/07 12:0 a.m.35 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8AI score0.00569EPSS
SaveExploits0References1
OSV
OSV
added 2024/03/05 12:15 a.m.5 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.8AI score0.0115EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.4 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.9AI score0.0115EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/05 12:15 a.m.13 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS7.8AI score0.0115EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/05 12:15 a.m.18 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.6AI score0.0115EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/04 12:0 a.m.17 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.1AI score0.0115EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/04 12:0 a.m.12 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.2AI score0.0115EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/01 1:15 p.m.6 views

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...

4.8CVSS3.8AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/01 12:0 a.m.4 views

PT-2024-18688 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/app/profile crud.php. The manipulation of the username argument leads to...

4.8CVSS4AI score0.00398EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.6 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters email/regno/phone/username can lead to sql injection...

9.8CVSS8.4AI score0.0076EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.6 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username and password can lead to SQL injection...

9.8CVSS8.1AI score0.00579EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.7 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username/password can lead to sql injection...

9.8CVSS8.4AI score0.00701EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.8 views

D-Link DIR-600M C1 Security Breach

The D-Link DIR-600M C1, among others, is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-600M C1 version 3.08, which stems from a buffer overflow caused by the parameter username in the component Telnet Service...

7.8CVSS7.4AI score0.02745EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.8 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters email/idno/phone/username can lead to sql injection...

9.8CVSS8.4AI score0.00731EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/21 12:0 a.m.8 views

PHP MySQL User Signup Login System Cross-Site Scripting Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A cross-site scripting vulnerability exists in PHP MySQL User Signup Login System version 1.0, which originates from a cross-site scripting vulnerability in the parameter username in the file...

5.4CVSS6.2AI score0.00584EPSS
SaveExploits1References4
NVD
NVD
added 2024/02/07 2:15 p.m.21 views

CVE-2024-24133

Atmail v6.6.0 was discovered to contain a SQL injection vulnerability via the username parameter on the login page...

9.8CVSS9.8AI score0.00637EPSS
SaveExploits0References1
Rows per page
Query Builder