Lucene search
+L

2407 matches found

OSV
OSV
added 2023/06/29 2:15 p.m.8 views

CVE-2023-3457

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS5.8AI score0.00867EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/06/29 12:0 a.m.8 views

PT-2023-24927 · Unknown · Sourcecodester Shopping Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Shopping Website version 1.0 Description: A critical issue has been found, affecting an unknown function of the file index.php. The manipulation of the username argument leads to sql injection, allowing remote attacks. The...

9.8CVSS7.2AI score0.00867EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/06/29 12:0 a.m.8 views

SourceCodester Shopping Website SQL注入漏洞

SourceCodester Shopping Website is a shopping website type CMS. A SQL injection vulnerability exists in SourceCodester Shopping Website version 1.0, which stems from a problem in the file index.php, where manipulation of the parameter username can lead to sql injection...

9.8CVSS7AI score0.00867EPSS
SaveExploits1References4
NVD
NVD
added 2023/06/15 5:15 p.m.22 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.1CVSS6.1AI score0.00673EPSS
SaveExploits1References1
Prion
Prion
added 2023/06/15 5:15 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

5.8CVSS6AI score0.00673EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/15 12:0 a.m.33 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.2AI score0.00673EPSS
SaveExploits1References1
OSV
OSV
added 2023/05/23 1:15 p.m.4 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

9.8CVSS7.4AI score0.03632EPSS
SaveExploits1References1
NVD
NVD
added 2023/05/23 1:15 p.m.24 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

9.8CVSS9.9AI score0.03632EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/23 1:15 p.m.18 views

Sql injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

7.5CVSS9.8AI score0.03632EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/23 12:0 a.m.9 views

PT-2023-24305 · Unknown · Old Age Home Management

Name of the Vulnerable Software and Affected Versions: Old Age Home Management version 1.0 Description: The issue concerns SQL Injection via the username parameter. This allows for potential unauthorized access or manipulation of data. Recommendations: For Old Age Home Management version 1.0,...

9.8CVSS8.2AI score0.03632EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/23 12:0 a.m.6 views

Old Age Home Management SQL注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in Old Age Home Management version 1.0, which stems from a problem with the username parameter and can be exploited by an attacker to conduct an SQL injection attack...

9.8CVSS8.6AI score0.03632EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/05/23 12:0 a.m.30 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

10AI score0.03632EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2023/05/17 12:0 a.m.9 views

The vulnerability in the spotifyConnect.php script of D-Link’s wireless signal amplifiers allows a hacker to execute arbitrary commands.

The vulnerability in the spotifyConnect.php microprogramming of D-Link DCH-M225 wireless signal amplifiers is related to the failure to eliminate special elements used in the operating system’s processing of the parameter userName. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.2AI score0.02811EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2023/05/09 12:0 a.m.8 views

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which...

9.8CVSS7.5AI score0.01009EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/05/08 12:0 a.m.83 views

Apache StreamPark Input Validation Error Vulnerability

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...

9.1CVSS6.7AI score0.01475EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/05/04 12:0 a.m.17 views

Caton Technology CTP Relay Server SQL注入漏洞

Caton Technology CTP Relay Server is a TS stream management platform from Caton Technology, China. Designed to handle complex video routing, real-time status, a built-in TS analyzer and stream-level monitoring alerts, it provides network operators with continuous information about bandwidth,...

9.8CVSS7.7AI score0.00619EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/01 12:0 a.m.11 views

Apache StreamPark 输入验证错误漏洞

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...

9.1CVSS6.8AI score0.01475EPSS
SaveExploits0References2
OSV
OSV
added 2023/04/26 8:15 p.m.8 views

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

6.1CVSS6.6AI score0.00639EPSS
SaveExploits1References2
Prion
Prion
added 2023/04/26 8:15 p.m.13 views

Cross site scripting

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

5.8CVSS6.4AI score0.00639EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/26 12:0 a.m.8 views

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

7.3AI score0.00639EPSS
SaveExploits1References2
Rows per page
Query Builder