Lucene search
+L

2407 matches found

CNNVD
CNNVD
added 2022/04/05 12:0 a.m.6 views

Payroll Management System SQL注入漏洞

Payroll Management System is a payroll management system by Carlo Montero Personal Developer. A security vulnerability exists in Payroll Management System v1.0, which allows an attacker to perform SQL injection via the username parameter...

9.8CVSS8.6AI score0.01551EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/04/05 12:0 a.m.6 views

PT-2022-18233 · Unknown · Insurance Management System

Name of the Vulnerable Software and Affected Versions: Insurance Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the username parameter. Recommendations: For Insurance Management System version 1.0, consider...

9.8CVSS7.6AI score0.01079EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/04/05 12:0 a.m.6 views

Insurance Management System SQL注入漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System 1.0, which allows an attacker to perform SQL injection via the username parameter...

9.8CVSS8.6AI score0.01079EPSS
SaveExploits1References3
NVD
NVD
added 2022/04/04 4:15 p.m.24 views

CVE-2021-43462

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...

5.4CVSS0.00574EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/04/04 4:15 p.m.3 views

CVE-2021-43462

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...

5.4CVSS5.8AI score0.00574EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/04 4:15 p.m.10 views

CVE-2021-43462

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...

5.4CVSS5.8AI score0.00574EPSS
SaveExploits1References1
Prion
Prion
added 2022/04/04 4:15 p.m.20 views

Cross site scripting

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...

3.5CVSS5.3AI score0.00574EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/04/04 3:39 p.m.28 views

CVE-2021-43462

A Cross Site Scripting XSS vulnerability exists in Rumble Mail Server 0.51.3135 via the username parameter...

5.5AI score0.00574EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2022/04/04 12:0 a.m.11 views

PT-2022-11849 · Unknown · Rumble Mail Server

Name of the Vulnerable Software and Affected Versions: Rumble Mail Server version 0.51.3135 Description: A Cross Site Scripting XSS issue exists via the username parameter. Recommendations: For Rumble Mail Server version 0.51.3135, consider restricting access to the login functionality until a...

5.4CVSS5.2AI score0.00574EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/04/04 12:0 a.m.8 views

Rumble Mail Server跨站脚本漏洞

Rumble Mail Server is a mail server suite for SMTP ESMTPSA, HTTP, POP3 and IMAP4v1 by Daniel Gruno, a personal developer.A cross-site scripting vulnerability exists in Rumble Mail Server version 0.51.3135, which stems from the username parameter's lack of data validation filtering for user The...

5.4CVSS5.6AI score0.00574EPSS
SaveExploits1References2
CNVD
CNVD
added 2022/04/01 12:0 a.m.66 views

ZoneMinder Cross-Site Scripting Vulnerability (CNVD-2022-57803)

ZoneMinder is an open source video surveillance software system. The system supports IP, USB and analog cameras, etc. A cross-site scripting vulnerability exists in ZoneMinder 1.32.3 and previous versions, which can be exploited by remote attackers to execute HTML or JavaScript code with the help...

6.1CVSS3AI score0.00769EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/28 12:0 a.m.6 views

Pro2col Stingray FTS 跨站脚本漏洞

Pro2col StingRay FTS is a file transfer server for Internet communication from Pro2col, UK. A cross-site scripting vulnerability exists in the Pro2col Stingray FTS that stems from the fact that manipulation of the Username parameter can lead to a cross-site scripting vulnerability...

6.1CVSS5.8AI score0.00605EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/03/28 12:0 a.m.9 views

PT-2022-7719 · Unknown · Pro2Col Stingray Fts

Name of the Vulnerable Software and Affected Versions: Pro2col Stingray FTS affected versions not specified Description: A problematic issue has been found in the software, where the manipulation of the Username argument leads to cross-site scripting. The attack can be initiated remotely. It is...

6.1CVSS6.6AI score0.00605EPSS
SaveExploits1References4
Prion
Prion
added 2022/03/22 4:15 p.m.28 views

Sql injection

WebRun 3.6.0.42 is vulnerable to SQL Injection via the P0 parameter used to set the username during the login process...

7.5CVSS9.8AI score0.06158EPSS
SaveExploits2References1Affected Software1
CNVD
CNVD
added 2022/03/07 12:0 a.m.23 views

D-Link Dsl-2730E Cross-Site Scripting Vulnerability

D-Link Dsl-2730E is a wireless modem router from D-Link, China. D-Link DSL-2730E CT-20131125 is vulnerable to a cross-site scripting vulnerability that allows XSS to access the password page in the maintenance configuration via the username parameter. No details of the vulnerability are currently...

5.4CVSS2.5AI score0.00809EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/03/02 11:15 p.m.4 views

CVE-2022-25393

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

7.5CVSS7.2AI score0.01214EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/02 11:15 p.m.4 views

CVE-2022-25393

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

7.5CVSS7.2AI score0.01214EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/02 11:15 p.m.13 views

Sql injection

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

5CVSS7.8AI score0.01214EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2022/03/02 10:39 p.m.86 views

CVE-2022-25393

CVE-2022-25393 affects Simple Bakery Shop Management v1.0. The vulnerability is a SQL injection in the username parameter, as stated across multiple sources. No explicit exploit details or active exploit status are provided in the connected documents. Remediation details (e.g., patch version) are...

7.5CVSS7.8AI score0.01214EPSS
SaveExploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/02/18 4:15 a.m.7 views

CVE-2021-46108

D-Link DSL-2730E CT-20131125 devices allow XSS via the username parameter to the password page in the maintenance configuration...

5.4CVSS5.8AI score0.00809EPSS
SaveExploits0References3
Rows per page
Query Builder