Lucene search
+L

2407 matches found

NVD
NVD
added 2023/12/01 3:15 a.m.20 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

7.5CVSS0.00664EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/12/01 12:0 a.m.6 views

Restaurant Table Booking System Security Vulnerability

PHPGurukul Restaurant Table Booking System is a restaurant table booking system. A security vulnerability exists in Restaurant Table Booking System due to cross-site scripting in the username parameter of rtbs/admin/index.php...

7.5CVSS6.1AI score0.00664EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/01 12:0 a.m.28 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

8.1AI score0.00664EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/01 12:0 a.m.8 views

PT-2023-30665 · Unknown · Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: Restaurant Table Booking System version 1.0 Description: The issue is related to SQL Injection in the rtbs/admin/index.php file via the username parameter. This allows for potential exploitation of the system. Recommendations: For Restaurant...

7.5CVSS7.8AI score0.00664EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2023/11/20 12:0 a.m.7 views

VulnCheck KEV: CVE-2020-28185

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php...

5.3CVSS6.1AI score0.18066EPSS
SaveExploits1References1
OSV
OSV
added 2023/11/15 6:15 a.m.6 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS5.8AI score0.0077EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/15 6:15 a.m.15 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS0.0077EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/15 6:15 a.m.6 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS7.4AI score0.0077EPSS
SaveExploits1References2
Prion
Prion
added 2023/11/15 6:15 a.m.15 views

Sql injection

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

7.5CVSS8.4AI score0.0077EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/15 12:0 a.m.21 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

10AI score0.0077EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/11/15 12:0 a.m.14 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

8AI score0.0077EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.5 views

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/07 9:15 p.m.7 views

CVE-2023-46787

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.9AI score0.00831EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/07 9:15 p.m.9 views

CVE-2023-46677

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtuname' parameter of the sign-up.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00831EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 a.m.9 views

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/10/28 1:15 a.m.4 views

CVE-2023-46467

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page...

5.4CVSS6.2AI score0.00504EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/10/28 12:0 a.m.9 views

Juzaweb CMS Cross-Site Scripting Vulnerability

Juzaweb CMS is a content management system developed by Juzaweb individual developers based on the Laravel framework and Web platform. A cross-site scripting vulnerability exists in Juzaweb CMS v.3.4 and earlier versions that could allow a remote attacker to execute arbitrary code by injecting a...

5.4CVSS6.8AI score0.00504EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/10/28 12:0 a.m.7 views

PT-2023-32369 · Alexanderlivanov · Fotoscms2

Name of the Vulnerable Software and Affected Versions: AlexanderLivanov FotosCMS2 versions up to 2.4.3 Description: A problematic vulnerability was found in the Cookie Handler component of the file profile.php, where the manipulation of the username argument leads to cross-site scripting. The...

6.1CVSS6.9AI score0.00391EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/10/28 12:0 a.m.7 views

FotosCMS2 Cross-Site Scripting Vulnerability

FotosCMS2 is a content management system by the individual developer Alexander Livanov. A cross-site scripting vulnerability exists in FotosCMS2 2.4.3 and earlier versions, which stems from the parameter username in the file profile.php that causes cross-site scripting...

6.1CVSS5.9AI score0.00391EPSS
SaveExploits1References4
OSV
OSV
added 2023/10/28 12:0 a.m.13 views

CVE-2023-46467

Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter of the registration page...

5.4CVSS7.4AI score0.00504EPSS
SaveExploits1References3
Rows per page
Query Builder