Lucene search
+L

6118 matches found

CNNVD
CNNVD
added 2023/04/14 12:00 a.m.12 views

Online Pizza Ordering System 代码问题漏洞

Online Pizza Ordering System is an online pizza ordering system by Carlo Montero Personal Developer. A security vulnerability exists in Online Pizza Ordering System v1.0. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

8.8CVSS8.5AI score0.00985EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/14 12:00 a.m.13 views

PT-2023-17452 · Unknown · Campcodes Advanced Online Voting System

Name of the Vulnerable Software and Affected Versions: Campcodes Advanced Online Voting System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/candidates row.php. The manipulation of the id argument leads to sql...

7.5CVSS7AI score0.00747EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.8 views

Campcodes Advanced Online Voting System 跨站脚本漏洞

Campcodes Advanced Online Voting System is an online voting system. A cross-site scripting vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter title of the file...

6.1CVSS6.2AI score0.00604EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.7 views

Employee Performance Evaluation System 代码问题漏洞

Employee Performance Evaluation System is an employee performance evaluation system by Carlo Montero personal developer. A security vulnerability exists in Employee Performance Evaluation System v1.0. An attacker can exploit this vulnerability to execute arbitrary code via specially crafted files...

8.8CVSS8.5AI score0.00955EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.10 views

Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of externally entered SQL statements in the parameter id of the file /admin/positionsrow.ph...

8.8CVSS8.2AI score0.00747EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.10 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file watch.php, where manipulation of the parameter code can lead to sql injection...

9.8CVSS7.1AI score0.00791EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/14 12:00 a.m.23 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file signup.php, where manipulation of the parameter id can lead to sql injection...

7.5CVSS6.9AI score0.00656EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/13 8:15 p.m.9 views

CVE-2023-27667

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/13 12:00 a.m.13 views

Auto Dealer Management System SQL注入漏洞

Auto Dealer Management System is a car dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System v1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

9.8CVSS8.7AI score0.0062EPSS
SaveExploits0References4
OSV
OSV
added 2023/04/12 6:15 p.m.16 views

CVE-2023-30528

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the potential for attackers to observe and capture it...

6.5CVSS6.6AI score0.00397EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2023/04/12 12:00 a.m.14 views

Jenkins Plugin WSO2 Oauth 安全漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

6.5CVSS6.6AI score0.00397EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.13 views

PT-2023-17390 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/products/manage product.php, specifically the component GET Parameter Handler. The manipulation of...

9.8CVSS6.9AI score0.00737EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/11 12:00 a.m.11 views

ShipStation 安全漏洞

ShipStation is an e-commerce retail order carrier processing and shipping software from ShipStation. A security vulnerability exists in ShipStation version 1.1 and prior versions that stems from unchecked access to an endpoint, allowing a remote attacker to insert arbitrary information into the...

3.7CVSS5.3AI score0.00633EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/11 12:00 a.m.15 views

PT-2023-17395 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A vulnerability was found in the software, classified as problematic. It affects some unknown functionality of the file /admin/?page=maintenance/brand. The manipulation ...

4.8CVSS4.4AI score0.00646EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2023/04/10 12:00 a.m.11 views

PT-2023-11805

Name of the Vulnerable Software and Affected Versions Tailor Mangement System version 1 Description A SQL injection issue allows a remote attacker to execute arbitrary code via the customer parameter of the "orderadd.php" file. This enables the attacker to potentially access and manipulate...

8.8CVSS8.4AI score0.00997EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2023/04/10 12:00 a.m.11 views

Allegro信任管理问题漏洞

Allegro is an open source, cross-platform library from Allegro that focuses on video games and multimedia programming. A security vulnerability exists in Allegro Tech BigFlow versions prior to 1.6, which stems from a lack of SSL certificate validation...

5.9CVSS5.9AI score0.00434EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/09 12:00 a.m.12 views

PT-2023-17377 · Unknown · Phpgurukul Bank Locker Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Bank Locker Management System version 1.0 Description: A critical issue has been found in the Password Reset component of the PHPGurukul Bank Locker Management System. The problem lies in an unknown function of the file recovery.ph...

9.1CVSS8AI score0.01019EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.12 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to a SQL injection vulnerability, which stems from the lack of validation of external input SQL statements in the parameter email of...

9.8CVSS8.2AI score0.008EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.11 views

ENTAB ERP 安全漏洞

ENTAB ERP is an enterprise resource management system from ENTAB. A security vulnerability exists in ENTAB ERP version 1.0 that stems from the presence of a username PII leak...

5.3CVSS5.7AI score0.03572EPSS
SaveExploits4References3
CNNVD
CNNVD
added 2023/04/08 12:00 a.m.15 views

Online Computer and Laptop Store 跨站脚本漏洞

Online Computer and Laptop Store is an online computer and laptop sales system. Online Computer and Laptop Store version 1.0 contains a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript scripts...

6.1CVSS6.1AI score0.00473EPSS
SaveExploits0References4
Rows per page
Query Builder