VulnCheck KEV: CVE-2018-0158

A vulnerability in the implementation of Internet Key Exchange Version 1 IKEv1 functionality in Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload, resulting in a denial-of-service DoS condition...

CVE-2022-26169

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the refcode parameter...

CVE-2022-26169

Air Cargo Management System v1.0 was discovered to contain a SQL injection vulnerability via the refcode parameter...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-26171

Bank Management System v1.o was discovered to contain a SQL injection vulnerability via the email parameter...

CVE-2022-25393

Simple Bakery Shop Management v1.0 was discovered to contain a SQL injection vulnerability via the username parameter...

CVE-2022-25396

Cosmetics and Beauty Product Online Store v1.0 was discovered to contain a SQL injection vulnerability via the search parameter...

CVE-2022-25394

Medical Store Management System v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter under customer-add.php...

CVE-2022-25411

A Remote Code Execution RCE vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-25407

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the Doctor parameter at /admin-panel1.php...

CVE-2022-25409

Hospital Management System v1.0 was discovered to contain a stored cross-site scripting XSS vulnerability via the demail parameter at /admin-panel1.php...

CVE-2022-25095

Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request...

Home Owners Collection Management System SQL注入漏洞

Home Owners Collection Management System is an owner collection management system. Home Owners Collection Management System contains a SQL injection vulnerability, which originates from the id parameter in the member view member.php, which is found in Home Owners Collection Management System v1.0...

CVE-2022-25004

Hospital Patient Record Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/doctors/managedoctor.php...

CVE-2022-25403

HMS v1.0 was discovered to contain a SQL injection vulnerability via the component admin.php...

CVE-2022-25402

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files...

PT-2022-17265 · Hms · Hms

Name of the Vulnerable Software and Affected Versions: HMS version 1.0 Description: An issue with access control in HMS allows unauthenticated attackers to read and modify all PHP files. Recommendations: For HMS version 1.0, consider restricting access to PHP files until a fix is available. As a...

CVE-2021-46247

The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from ASUS CMAX6000 v1.02.00...

CVE-2022-23319

A segmentation fault during PCF file parsing in pcf2bdf versions =1.05 allows an attacker to trigger a program crash via a specially crafted PCF font file. This crash affects the availability of the software and dependent downstream components...

EasyCMS SQL注入漏洞

EasyCMS is a Php-based website builder from the EasyCMS community. A SQL injection vulnerability exists in EasyCMS, which stems from the product ArticlemAction.class.php file not effectively handling special characters in user-supplied search term data. An attacker can execute malicious SQL...