Lucene search
+L

2961 matches found

OSV
OSV
•added 2023/06/30 7:15 a.m.•15 views

CVE-2023-3473

A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS5.7AI score0.0082EPSS
SaveExploits1References3
OSV
OSV
•added 2023/06/29 2:15 p.m.•18 views

CVE-2023-3457

A vulnerability was found in SourceCodester Shopping Website 1.0. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

9.8CVSS5.8AI score0.00867EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/06/29 12:00 a.m.•19 views

SourceCodester Shopping Website SQL注入漏洞

SourceCodester Shopping Website is a shopping website type CMS. A SQL injection vulnerability exists in SourceCodester Shopping Website version 1.0, which stems from a problem in the file index.php, where manipulation of the parameter username can lead to sql injection...

9.8CVSS7AI score0.00867EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/06/29 12:00 a.m.•25 views

PT-2023-24927 · Unknown · Sourcecodester Shopping Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Shopping Website version 1.0 Description: A critical issue has been found, affecting an unknown function of the file index.php. The manipulation of the username argument leads to sql injection, allowing remote attacks. The...

9.8CVSS7.2AI score0.00867EPSS
SaveExploits1References6
NVD
NVD
•added 2023/06/15 5:15 p.m.•29 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.1CVSS6.1AI score0.00673EPSS
SaveExploits1References1
Prion
Prion
•added 2023/06/15 5:15 p.m.•27 views

Cross site scripting

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

5.8CVSS6AI score0.00673EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/06/15 12:00 a.m.•47 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.2AI score0.00673EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/23 1:15 p.m.•13 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

9.8CVSS7.4AI score0.03632EPSS
SaveExploits1References1
NVD
NVD
•added 2023/05/23 1:15 p.m.•34 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

9.8CVSS9.9AI score0.03632EPSS
SaveExploits1References1
Prion
Prion
•added 2023/05/23 1:15 p.m.•23 views

Sql injection

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

7.5CVSS9.8AI score0.03632EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/05/23 12:00 a.m.•18 views

PT-2023-24305 · Unknown · Old Age Home Management

Name of the Vulnerable Software and Affected Versions: Old Age Home Management version 1.0 Description: The issue concerns SQL Injection via the username parameter. This allows for potential unauthorized access or manipulation of data. Recommendations: For Old Age Home Management version 1.0,...

9.8CVSS8.2AI score0.03632EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/23 12:00 a.m.•3 views

CVE-2023-33338: Improper Neutralization of Special Elements used in an SQL Command

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

9.8CVSS5.8AI score0.03632EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/05/23 12:00 a.m.•40 views

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

10AI score0.03632EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/05/23 12:00 a.m.•18 views

Old Age Home Management SQL注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in Old Age Home Management version 1.0, which stems from a problem with the username parameter and can be exploited by an attacker to conduct an SQL injection attack...

9.8CVSS8.6AI score0.03632EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2023/05/17 12:00 a.m.•17 views

The vulnerability in the spotifyConnect.php script of D-Link’s wireless signal amplifiers allows a hacker to execute arbitrary commands.

The vulnerability in the spotifyConnect.php microprogramming of D-Link DCH-M225 wireless signal amplifiers is related to the failure to eliminate special elements used in the operating system’s processing of the parameter userName. Exploiting this vulnerability allows a remote attacker to execute...

10CVSS8.2AI score0.02811EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2023/05/09 12:00 a.m.•17 views

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A SQL injection vulnerability exists in SourceCodester Food Ordering Management System version 1.0, which...

9.8CVSS7.5AI score0.01009EPSS
SaveExploits0References4
CNVD
CNVD
•added 2023/05/08 12:00 a.m.•103 views

Apache StreamPark Input Validation Error Vulnerability

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...

9.1CVSS6.7AI score0.01475EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/05/04 12:00 a.m.•26 views

Caton Technology CTP Relay Server SQL注入漏洞

Caton Technology CTP Relay Server is a TS stream management platform from Caton Technology, China. Designed to handle complex video routing, real-time status, a built-in TS analyzer and stream-level monitoring alerts, it provides network operators with continuous information about bandwidth,...

9.8CVSS7.7AI score0.00619EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/05/01 12:00 a.m.•21 views

Apache StreamPark 输入验证错误漏洞

Apache StreamPark is the United States Apache Apache Foundation of a streaming media application development framework. Apache StreamPark suffers from an input validation error vulnerability that stems from the fact that when a user modifies his or her profile, the username is passed as a paramet...

9.1CVSS6.8AI score0.01475EPSS
SaveExploits0References2
OSV
OSV
•added 2023/04/26 8:15 p.m.•17 views

CVE-2023-29836

Cross Site Scripting vulnerability found in Exelysis Unified Communication Solutions EUCS v.1.0 allows a remote attacker to execute arbitrary code via the Username parameter of the eucsAdmin login form...

6.1CVSS6.6AI score0.00639EPSS
SaveExploits1References2
Rows per page
Query Builder