Lucene search
+L

6115 matches found

CNNVD
CNNVD
added 2024/10/25 12:00 a.m.7 views

Best Courier Management System 安全漏洞

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A security vulnerability exists in Best Courier Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the email parameter of a login request...

9.8CVSS7.7AI score0.00889EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/10/25 12:00 a.m.10 views

PT-2024-16213 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting an unknown functionality of the file /admin/print.php. The manipulation of the id argument leads to SQL injection. T...

5.8CVSS5.8AI score0.00721EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2024/10/25 12:00 a.m.14 views

PT-2024-16224 · Unknown · Codezips Sales Management System

Name of the Vulnerable Software and Affected Versions: Codezips Sales Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /addcustind.php. The manipulation of the refno argument leads to SQL injection. The attack can be launched remotely...

9.8CVSS8.1AI score0.00746EPSS
SaveExploits1References9
OSV
OSV
added 2024/10/24 11:15 p.m.13 views

CVE-2024-10350

A vulnerability was found in code-projects Hospital Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/add-doctor.php. The manipulation of the argument docname leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS5.8AI score0.00573EPSS
SaveExploits1References5
Patchstack
Patchstack
added 2024/10/24 10:09 p.m.13 views

WordPress League of Legends Shortcodes plugin <= 1.0.1 - Authenticated (Contributor+) SQL Injection vulnerability

Authenticated Contributor+ SQL Injection vulnerability discovered by István Márton in WordPress Plugin League of Legends Shortcodes versions = 1.0.1...

6.5CVSS8.1AI score0.00439EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.10 views

PHPGurukul Vehicle Record System SQL注入漏洞

PHPGurukul Vehicle Record System is a vehicle record management system from PHPGurukul. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Vehicle Record System, which originates from an SQL injection vulnerability contained in the searchinputdata parameter of the...

8.8CVSS7AI score0.00545EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/10/24 12:00 a.m.14 views

Digitory Multi Channel Integrated POS 安全漏洞

Digitory Multi Channel Integrated POS is an integrated POS system from Digitory, Inc. A security vulnerability exists in Digitory Multi Channel Integrated POS v1.0, which stems from a lack of rate limiting in the OTP validation component, allowing an attacker to access the ordering system and pla...

9.1CVSS6.7AI score0.00398EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/10/24 12:00 a.m.9 views

PT-2024-16207 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical issue was found in the function delete tenant of the file "/ajax.php?action=delete tenant". The manipulation of the argument id leads to SQL injection. The...

9.8CVSS8.4AI score0.00573EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/10/23 12:00 a.m.16 views

PT-2024-16170 · Unknown · Phpgurukul Medical Card Generation System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Medical Card Generation System version 1.0 Description: A critical issue has been discovered, affecting the Managecard Edit Card Detail Page component, specifically the /admin/edit-card-detail.php file. The manipulation of the edit...

7.2CVSS5.8AI score0.00411EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.7 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which originates from the parameter viewid in the file /admin/view-card-detail.php that can lead...

7.2CVSS5.7AI score0.00382EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.10 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter editid in the file /admin/edit-card-detail.php that can lead to S...

7.2CVSS5.8AI score0.00411EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/10/23 12:00 a.m.6 views

PHPGurukul Medical Card Generation System SQL注入漏洞

PHPGurukul Medical Card Generation System is a medical card generation system from PHPGurukul Inc. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Medical Card Generation System, which stems from the parameter searchdata in the file /admin/search-medicalcard.php that can lea...

7.2CVSS5.8AI score0.0044EPSS
SaveExploits0References4
OSV
OSV
added 2024/10/22 10:15 p.m.11 views

CVE-2024-48657

SQL Injection vulnerability in hospital management system in php with source code v.1.0.0 allows a remote attacker to execute arbitrary code...

7.2CVSS6.1AI score0.00871EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/10/22 12:00 a.m.11 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computer system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. A security vulnerability exists in Hospital Management System version v1.0.0 that stems from the presence of a SQL injection vulnerability...

8.1CVSS8.2AI score0.00871EPSS
SaveExploits1References2
OSV
OSV
added 2024/10/21 8:15 p.m.9 views

CVE-2024-48597

Online Clinic Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /success/editp.php?action=edit...

8.1CVSS5.8AI score0.00456EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2024/10/21 7:44 a.m.9 views

WordPress Agile Video Player Lite plugin <= 1.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Agile Video Player Lite versions = 1.0...

7.1CVSS6.1AI score0.00331EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.10 views

Code-Projects Pharmacy Management System SQL注入漏洞

Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A SQL injection vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which stems from the parameter text in the file /addnewinvoice.php that can lead to SQL injection...

9.8CVSS7AI score0.0052EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/10/21 12:00 a.m.11 views

AWS ALB Route Directive Adapter For Istio 安全漏洞

AWS ALB Route Directive Adapter For Istio is an AWS ALB Route Directive Adapter for Istio open source by Amazon Web Services. A security vulnerability exists in AWS ALB Route Directive Adapter For Istio v1.0 and v1.1 that stems from the use of a JWT for authentication that lacks proper signer and...

7.5CVSS8.2AI score0.00351EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.8 views

Codezips Sales Management System SQL注入漏洞

Codezips Sales Management System is an open source sales management system from Codezips. A SQL injection vulnerability exists in Codezips Sales Management System version 1.0, which stems from a parameter id in the file eletecustcom.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/20 12:00 a.m.12 views

SourceCodester Sentiment Based Movie Rating System SQL注入漏洞

SourceCodester Sentiment Based Movie Rating System is an open source movie rating system from SourceCodester. A SQL injection vulnerability exists in SourceCodester Sentiment Based Movie Rating System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...

9.8CVSS7.3AI score0.00553EPSS
SaveExploits1References6
Rows per page
Query Builder