Lucene search
+L

579 matches found

CNNVD
CNNVD
added 2025/07/30 12:0 a.m.11 views

Campcodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in Campcodes Online Recruitment Management System version 1.0, which stems from improper handling of parameter IDs in the file /admin/ajax.php, which cou...

9.8CVSS7.8AI score0.00396EPSS
SaveExploits1References5
OSV
OSV
added 2025/07/28 12:15 p.m.12 views

CVE-2025-8274

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

9.8CVSS5.8AI score0.00399EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.11 views

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which stems from improper handling of parameter IDs in the file /admin/ajax.php, which cou...

9.8CVSS7.8AI score0.00399EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.10 views

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which stems from improper handling of parameter IDs in the file /admin/ajax.php, which cou...

9.8CVSS7.8AI score0.00399EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/21 12:0 a.m.13 views

CampCodes Online Recruitment Management System 代码问题漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines, Inc. A code issue vulnerability exists in Campcodes Online Recruitment Management System version 1.0 due to an unrestricted upload as a result of incorrect manipulation of the parameter i...

8.8CVSS6.6AI score0.00367EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/17 12:0 a.m.10 views

Webkul QloApps 注入漏洞

Webkul QloApps is a hotel reservation management software from Webkul. An injection vulnerability exists in Webkul QloApps version 1.6.1, which stems from SQL injection due to incorrect manipulation of the parameter packItself in the file /admin/ajaxproductslist.php...

7.2CVSS5.6AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/05 12:0 a.m.14 views

CampCodes Online Recruitment Management System 注入漏洞

CampCodes Online Recruitment Management System is a recruitment management system from CampCodes Philippines. An injection vulnerability exists in CampCodes Online Recruitment Management System version 1.0, which is caused by an incorrect manipulation of the parameter positionid in the file...

9.8CVSS7.8AI score0.00415EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/05/23 5:0 a.m.15 views

CVE-2023-51048

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Anewsauth parameter at /admin/ajax.php...

9.8CVSS8.3AI score0.00534EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:59 a.m.16 views

CVE-2023-51052

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aformauth parameter at /admin/ajax.php...

9.8CVSS8.3AI score0.00534EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 3:15 a.m.12 views

CVE-2023-26856

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login...

7.2CVSS8.4AI score0.00726EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:12 a.m.8 views

CVE-2023-24646

An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS7.9AI score0.01071EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 2:59 a.m.8 views

CVE-2023-1365

A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

7.5CVSS8AI score0.00753EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:0 p.m.16 views

CVE-2022-46955

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=savequeue...

9.8CVSS8.3AI score0.00602EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:43 p.m.12 views

CVE-2020-9340

fauzantrif eLection 2.0 has SQL Injection via the admin/ajax/opkandidat.php id parameter...

7.2CVSS8.3AI score0.0104EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/05/22 9:34 a.m.15 views

CVE-2015-9446

The unite-gallery-lite plugin before 1.5 for WordPress has SQL injection via datagalleryID to wp-admin/admin-ajax.php...

8.8CVSS8.1AI score0.02425EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:48 a.m.11 views

CVE-2018-5655

An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. XSS exists via the wp-admin/admin-ajax.php security parameter...

6.1CVSS6.2AI score0.0078EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:10 a.m.10 views

CVE-2018-5656

An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. CSRF exists via wp-admin/admin-ajax.php...

8.8CVSS7AI score0.00604EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 a.m.15 views

CVE-2017-18634

The newspaper theme before 6.7.2 for WordPress has script injection via tdadsheader to admin-ajax.php...

9.8CVSS7.3AI score0.02173EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:49 a.m.17 views

CVE-2018-15818

An issue was discovered in Repute ARForms 3.5.1 and prior. An attacker is able to delete any file on the server with web server privileges by sending a malicious request to admin-ajax.php...

7.5CVSS6.8AI score0.02049EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 a.m.12 views

CVE-2015-9436

The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=termtree prefix or widgetid parameter...

5.4CVSS6AI score0.01044EPSS
SaveExploits1References1
Rows per page
Query Builder