Lucene search
+L

6118 matches found

CNNVD
CNNVD
added 2025/12/17 12:00 a.m.13 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/17 12:00 a.m.16 views

itsourcecode COVID Tracking System 安全漏洞

The itsourcecode COVID Tracking System is a new crown pneumonia tracking system open-sourced by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode COVID Tracking System, which stems from malicious code injection of the parameter id in the file /cts/admin/?page=zone, whic...

7.3CVSS7.8AI score0.00203EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/12/17 12:00 a.m.52 views

PT-2025-51841

Name of the Vulnerable Software and Affected Versions ITSourcecode COVID Tracking System Using QR-Code version 1.0 Description A SQL injection issue exists in the '/cts/admin/?page=zone' file. The issue occurs because malicious code can be injected through the id parameter and directly used in SQ...

7.3CVSS7.8AI score0.00203EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/12/16 9:31 a.m.12 views

EUVD-2025-203539

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ThemeNectar Salient Shortcodes salient-shortcodes allows Stored XSS.This issue affects Salient Shortcodes: from n/a through = 1.5.4...

6.5CVSS5.5AI score0.0016EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/16 12:26 a.m.19 views

CVE-2023-36338

Inventory Management System 1 was discovered to contain a SQL injection vulnerability...

5.3CVSS8.3AI score0.00352EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router 安全漏洞

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router is a wireless router from Dbit China. A security vulnerability exists in the Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router version V1, which stems from unimplemented rate limiting and could lead to brute force password cracking...

6.5CVSS6.7AI score0.00273EPSS
SaveExploits1References3
OSV
OSV
added 2025/12/15 9:15 p.m.7 views

CVE-2023-38913

SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

5.3CVSS6.1AI score0.00585EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/12/15 12:00 a.m.30 views

CVE-2023-38913

SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...

0.00585EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.14 views

PT-2025-51317

Name of the Vulnerable Software and Affected Versions anirbandutta9 NEWS-BUZZ version 1.0 Description A SQL injection flaw exists in anirbandutta9 NEWS-BUZZ version 1.0. This allows a remote attacker to execute arbitrary code by using a crafted script. The vulnerability is due to insufficient inp...

5.3CVSS8.3AI score0.00585EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2025/12/15 12:00 a.m.5 views

CVE-2023-36338

Inventory Management System 1 was discovered to contain a SQL injection vulnerability...

7.9AI score0.00352EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/12/15 12:00 a.m.23 views

PT-2025-51290

Name of the Vulnerable Software and Affected Versions Wp2Fac version 1.0 Description The software contains an OS command injection issue in the send.php endpoint. This allows remote attackers to execute arbitrary system commands. The issue occurs because attackers can inject shell commands throug...

9.3CVSS8.1AI score0.01122EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2025/12/15 12:00 a.m.13 views

NEWS-BUZZ 安全漏洞

NEWS-BUZZ is a news management system by ANIRBAN DUTTA Individual Developer that allows users to publish and manage a variety of news content. A security vulnerability exists in NEWS-BUZZ version v.1.0, which stems from vulnerability to SQL injection attacks and may lead to the execution of...

5.3CVSS7.9AI score0.00585EPSS
SaveExploits1References2
CVE
CVE
added 2025/12/15 12:00 a.m.25 views

CVE-2023-38913

CVE-2023-38913 affects anirbandutta9 NEWS-BUZZ v.1.0. The connected sources specify a SQL injection vulnerability due to insufficient input validation in NEWS-BUZZ, which could allow a remote attacker to execute arbitrary code via a crafted script. Exploitation status is not confirmed in the docu...

5.3CVSS8.4AI score0.00585EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.13 views

Code-Projects Computer Laboratory System 代码问题漏洞

Computer Laboratory System is a computer laboratory system. Computer Laboratory System has a file upload vulnerability that originates from a misbehavior of the parameter image in the file technicalstaffpic.php, which can be exploited by an attacker to cause an arbitrary file upload...

7.2CVSS5.2AI score0.00392EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.11 views

Code-Projects Computer Book Store SQL注入漏洞

Code-Projects Computer Book Store is an open source computer book store by Code-Projects. Code-Projects Computer Book Store version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter bookisbn in the file /admindelete.php, which could lead to a S...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

itsourcecode COVID Tracking System SQL注入漏洞

itsourcecode COVID Tracking System is a new coronary pneumonia tracking system open-sourced by itsourcecode. An SQL injection vulnerability exists in version 1.0 of itsourcecode COVID Tracking System, which stems from an incorrect manipulation of the parameter Username in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.14 views

itsourcecode Online Pet Shop Management System SQL注入漏洞

itsourcecode Online Pet Shop Management System is itsourcecode open source online pet store management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Pet Shop Management System. The vulnerability stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.10 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which originates from the incorrect manipulation of the parameter Product in the file...

9.8CVSS7.7AI score0.00401EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/14 12:00 a.m.20 views

PT-2025-51148

Name of the Vulnerable Software and Affected Versions code-projects Student File Management System version 1.0 Description A flaw exists in the Student File Management System that allows for remote code execution. The issue is located in the file /admin/delete user.php and involves the manipulati...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/12/14 12:00 a.m.9 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is a itsourcecode open source online cake ordering system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from an incorrect manipulation of the parameter supplier in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
Rows per page
Query Builder