Lucene search
+L

2407 matches found

Prion
Prion
added 2023/09/18 12:15 p.m.29 views

Sql injection

SQL injection vulnerability in Exam Form Submission in PHP with Source Code v.1.0 allows a remote attacker to escalate privileges via the val-username parameter in /index.php...

7.5CVSS9.9AI score0.00739EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/09/18 12:0 a.m.8 views

Online Exam Form Submission SQL Injection Vulnerability

Online Exam Form Submission is an online exam form submission application by janobe Personal Developer. A security vulnerability exists in Online Exam Form Submission version v.1.0 that originates from allowing remote attackers to escalate privileges via the val-username parameter in /index.php...

9.8CVSS7.2AI score0.00739EPSS
SaveExploits1References3
NVD
NVD
added 2023/09/14 9:15 p.m.18 views

CVE-2023-38912

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...

9.8CVSS9.7AI score0.01409EPSS
SaveExploits1References2
Prion
Prion
added 2023/09/14 9:15 p.m.21 views

Sql injection

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...

7.5CVSS9.7AI score0.01409EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/09/14 12:0 a.m.6 views

Super Store Finder SQL Injection Vulnerability

Super Store Finder is an easy-to-use Google Maps API store finder program Super Store Finder by Super Store Finder. A security vulnerability exists in Super Store Finder version v.3.6, which stems from a vulnerability that allows a remote attacker to execute arbitrary code via a carefully crafted...

9.8CVSS7.8AI score0.01409EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2023/09/14 12:0 a.m.22 views

CVE-2023-38912

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...

9.9AI score0.01409EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/09/14 12:0 a.m.7 views

CVE-2023-38912

SQL injection vulnerability in Super Store Finder PHP Script v.3.6 allows a remote attacker to execute arbitrary code via a crafted payload to the username parameter...

8.6AI score0.01409EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/09/11 12:0 a.m.13 views

PT-2023-9201 · Tp Link · Tp-Link Omada Er605

Name of the Vulnerable Software and Affected Versions: TP-Link Omada ER605 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. The flaw exists within the handling of the...

7.5CVSS7.9AI score0.0071EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2023/09/08 3:15 a.m.11 views

CVE-2023-41594

Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Username and Password parameters...

7.5CVSS7.2AI score0.00773EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/09/08 12:0 a.m.9 views

Dairy Farm Shop Management System SQL Injection Vulnerability

Dairy Farm Shop Management System is a Dairy Farm Shop Management System by Anuj Kumar, an individual developer. A security vulnerability exists in Dairy Farm Shop Management System Using PHP and MySQL v1.1, which stems from multiple SQL injection vulnerabilities in the Username and Password...

7.5CVSS8.1AI score0.00773EPSS
SaveExploits1References4
OSV
OSV
added 2023/08/29 8:15 p.m.3 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.9AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/08/29 8:15 p.m.6 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6.1CVSS5.9AI score0.0037EPSS
SaveExploits1References2
Prion
Prion
added 2023/08/29 8:15 p.m.21 views

Cross site scripting

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

5.8CVSS5.9AI score0.0037EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/08/29 12:0 a.m.38 views

CVE-2023-39678

A cross-site scripting XSS vulnerability in the device web interface Log Query page of BDCOM OLT P3310D-2AC 10.1.0F Build 69083 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter...

6AI score0.0037EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/08/29 12:0 a.m.10 views

BDCOM OLT P3310D-2AC 跨站脚本漏洞

The BDCOM OLT P3310D-2AC is a dual power optical path terminal from BDCOM China. A security vulnerability exists in BDCOM OLT P3310D-2AC version 10.1.0F Build 69083. An attacker can exploit this vulnerability to execute arbitrary web script or HTML via a specially crafted payload injected with th...

6.1CVSS6.7AI score0.0037EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2023/08/21 5:15 p.m.5 views

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

5.4CVSS6.5AI score0.00431EPSS
SaveExploits1References2
NVD
NVD
added 2023/08/21 5:15 p.m.20 views

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

5.4CVSS5.8AI score0.00431EPSS
SaveExploits1References1
OSV
OSV
added 2023/08/21 5:15 p.m.5 views

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

5.4CVSS6.1AI score0.00431EPSS
SaveExploits1References1
Prion
Prion
added 2023/08/21 5:15 p.m.15 views

Cross site scripting

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

4.9CVSS5.8AI score0.00431EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/08/21 12:0 a.m.26 views

CVE-2023-39094

Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function...

6AI score0.00431EPSS
SaveExploits1References1
Rows per page
Query Builder