Lucene search
+L

2407 matches found

CNNVD
CNNVD
added 2023/02/27 12:0 a.m.8 views

Simple Customer Relationship Management SQL注入漏洞

Simple Customer Relationship Management Simple CRM is a Simple Customer Relationship Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Customer Relationship Management System v1.0, which stems from a SQL injection vulnerability via the username...

8.8CVSS8.2AI score0.01048EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/02/27 12:0 a.m.6 views

Art Gallery Management System SQL注入漏洞

Art Gallery Management System is an art gallery management system developed by Anuj Kumar, an individual developer. A security vulnerability exists in Art Gallery Management System Project PHP version 1.0, which can be exploited by an attacker to perform SQL injection via the username parameter i...

9.8CVSS8.7AI score0.01149EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/02/27 12:0 a.m.6 views

PT-2023-18862 · Unknown · Art Gallery Management System Project

Name of the Vulnerable Software and Affected Versions: Art Gallery Management System Project in PHP version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter in the Admin Login. Recommendations: For version 1.0,...

9.8CVSS9.6AI score0.01149EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/02/26 12:0 a.m.5 views

Dental Clinic Appointment Reservation System SQL注入漏洞

Dental Clinic Appointment Reservation System is a Dental Clinic Appointment Reservation System by jkev Individual Developer. A SQL injection vulnerability exists in SourceCodester Dental Clinic Appointment Reservation System version 1.0, which is caused by an incorrect manipulation of the usernam...

9.8CVSS7.7AI score0.00915EPSS
SaveExploits1References4
NVD
NVD
added 2023/02/24 8:15 a.m.22 views

CVE-2023-0997

A vulnerability was found in SourceCodester Moosikay E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection...

8.8CVSS7.9AI score0.00912EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/02/24 12:0 a.m.6 views

Moosikay E-Commerce System SQL注入漏洞

Moosikay E-Commerce System is an e-commerce system by the individual developer Arvin Arandilla. A SQL injection vulnerability exists in SourceCodester Moosikay E-Commerce System version 1.0, which stems from an incorrect manipulation of the username parameter resulting in sql injection...

8.8CVSS7.7AI score0.00912EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/02/24 12:0 a.m.13 views

PT-2023-16675 · Sourcecodester · Moosikay E-Commerce System

Name of the Vulnerable Software and Affected Versions: SourceCodester Moosikay E-Commerce System version 1.0 Description: A critical issue affects the file /Moosikay/order.php of the component POST Parameter Handler. The manipulation of the username argument leads to sql injection. The attack may...

8.8CVSS7.8AI score0.00912EPSS
SaveExploits1References6
OSV
OSV
added 2023/02/22 11:15 p.m.6 views

CVE-2022-48149

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

9.8CVSS5.8AI score0.00647EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/22 11:15 p.m.24 views

Sql injection

Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

7.5CVSS9.8AI score0.00647EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/02/22 12:0 a.m.7 views

Online Student Admission System SQL注入漏洞

Online Student Admission System is an online student admission system. It is used to computerize all pre- and post-admission activities of an institution. A security vulnerability exists in Online Student Admission System version 1.0, which was discovered to contain an SQL injection vulnerability...

9.8CVSS8.6AI score0.00647EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/02/22 12:0 a.m.9 views

PT-2023-15591 · Unknown · Online Student Admission System

Name of the Vulnerable Software and Affected Versions: Online Student Admission System in PHP Free Source Code version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Online Student...

9.8CVSS9.5AI score0.00647EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/17 6:15 p.m.5 views

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

9.8CVSS6.1AI score0.00821EPSS
SaveExploits1References1
NVD
NVD
added 2023/02/17 6:15 p.m.17 views

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

9.8CVSS9.8AI score0.00821EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/02/17 12:0 a.m.23 views

CVE-2021-33948

SQL injection vulnerability in FantasticLBP Hotels Server v1.0 allows attacker to execute arbitrary code via the username parameter...

10AI score0.00821EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/02/17 12:0 a.m.8 views

FantasticLBP Hotels Server SQL注入漏洞

FantasticLBP Hotels Server is a backend management system for hotel reservation systems. A security vulnerability exists in FantasticLBP Hotels Server v1.0 that allows an attacker to execute arbitrary code via the username parameter...

9.8CVSS8.9AI score0.00821EPSS
SaveExploits1References2
NVD
NVD
added 2023/02/15 10:15 p.m.23 views

CVE-2021-34117

SQL Injection vulnerability in SEO Panel 4.9.0 in api/user.api.php in function getUserName in the username parameter, allows attackers to gain sensitive information...

7.5CVSS8AI score0.00941EPSS
SaveExploits1References3
OSV
OSV
added 2023/02/15 9:15 p.m.7 views

CVE-2022-45543

Cross site scripting XSS vulnerability in DiscuzX 3.4 allows attackers to execute arbitrary code via the datetline, title, tpp, or username parameters via the audit search...

6.1CVSS5.9AI score0.00535EPSS
SaveExploits0References1
OSV
OSV
added 2023/02/15 2:15 p.m.5 views

CVE-2023-0840

A vulnerability classified as problematic was found in PHPCrazy 1.1.1. This vulnerability affects unknown code of the file admin/admin.php?action=users&mode=info&user=2. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has...

5.4CVSS3.7AI score0.00622EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:10 a.m.9 views

SUSE CVE-2007-5702

Cross-site scripting XSS vulnerability in swamp/action/LoginActions aka the login box in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x allows remote attackers to inject arbitrary web script or HTML via the username parameter. NOTE: some of these details are obtaine...

4.3CVSS6.1AI score0.01366EPSS
SaveExploits0References3
OSV
OSV
added 2023/02/15 4:15 a.m.4 views

UBUNTU-CVE-2022-47373

Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password functionality in which parameter username does not proper input validation/sanitization thus results in executing malicious JavaScript...

6.4CVSS5.8AI score0.00338EPSS
SaveExploits0References3
Rows per page
Query Builder