Lucene search
K

17 matches found

CNNVD
CNNVD
added 2026/03/26 12:0 a.m.3 views

Code-Projects Online Food Ordering System SQL注入漏洞

Code-Projects Online Food Ordering System is an open-source online meal ordering system developed by Code-Projects. Version 1.0 of the Code-Projects Online Food Ordering System has a SQL injection vulnerability. This vulnerability stems from incorrect handling of the Username parameter in the...

7.5CVSS7.2AI score0.00014EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/12/30 12:0 a.m.2 views

itsourcecode Society Management System SQL注入漏洞

itsourcecode Society Management System is an itsourcecode open source society management system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Society Management System, which stems from incorrect manipulation of the parameter Username in the file /admin/addadmin.php, which...

9.8CVSS7.9AI score0.00028EPSS
Exploits1References5
CNVD
CNVD
added 2025/12/10 12:0 a.m.2 views

Simple Shopping Cart adminlogin.php File SQL Injection Vulnerability

Simple Shopping Cart is a simple shopping cart system. Simple Shopping Cart suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminusername in the file /adminlogin.php. An attacker can exploit this...

9.8CVSS7.8AI score0.00028EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/11/19 12:0 a.m.20 views

PT-2025-47536

Name of the Vulnerable Software and Affected Versions Campcodes Online Hospital Management System version 1.0 Description The Campcodes Online Hospital Management System version 1.0 is susceptible to SQL Injection. This issue affects the admin panel and specifically occurs through the username...

7.2AI score0.00044EPSS
Exploits1References3
NVD
NVD
added 2025/11/17 7:16 p.m.2 views

CVE-2024-44662

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page...

6.5CVSS0.00037EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/11/17 12:0 a.m.1 views

PHPGurukul Online Shopping Portal 安全漏洞

Online Shopping Portal is an online store system. A SQL injection vulnerability exists in Online Shopping Portal due to a lack of validation of an externally entered SQL statement in the username parameter of the admin page. An attacker can exploit this vulnerability to execute illegal SQL comman...

6.5CVSS8.2AI score0.00037EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-27080

Malicious code in bioql PyPI...

9.8CVSS7.5AI score0.00066EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/09/06 11:25 a.m.3 views

CVE-2025-41032

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...

9.8CVSS7.9AI score0.00061EPSS
Exploits0References1
Snyk
Snyk
added 2025/09/04 11:46 a.m.2 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the dataAdminusername parameter in the /apprain/admin/manage/add/ path. An attacker can access, modify, or delete database records by injecting crafted input. Remediation There is no fixed version for apprain/apprain...

9.8CVSS7.9AI score0.00061EPSS
Exploits0References2
OSV
OSV
added 2025/09/04 11:15 a.m.3 views

CVE-2025-41032

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...

9.8CVSS5.7AI score
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/04 11:6 a.m.2 views

CVE-2025-41032 SQL injection vulnerability in appRain CMF

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...

8.7CVSS7.4AI score0.00061EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/04 11:6 a.m.3 views

CVE-2025-41032 SQL injection vulnerability in appRain CMF

An SQL injection vulnerability has been found in appRain CMF 4.0.5. This vulnerability allows an attacker to retrieve, create, update, and delete the database, through the 'data%5BAdmin%5D%5Busername%5D' parameter in /apprain/admin/manage/add/...

8.7CVSS0.00061EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/09/04 12:0 a.m.2 views

appRain CMF SQL注入漏洞

appRain CMF is a content management framework. appRain CMF suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the data%5BAdmin%5D%5Busername%5D parameter of /apprain/admin/manage/add. An attacker could use this vulnerability t...

9.8CVSS7.7AI score0.00061EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/09/04 12:0 a.m.4 views

PT-2025-35903

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: An SQL injection flaw exists in appRain CMF version 4.0.5. This flaw allows an attacker to retrieve, create, update, and delete the database through the data%5BAdmin%5D%5Busername%5D parameter in the...

9.8CVSS7.3AI score0.00061EPSS
Exploits0References3
NVD
NVD
added 2023/06/15 5:15 p.m.8 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.1CVSS6.1AI score0.00102EPSS
Exploits1References1
Prion
Prion
added 2023/06/15 5:15 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

5.8CVSS6AI score0.00102EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/06/15 12:0 a.m.13 views

CVE-2023-34666

Cross-site scripting XSS vulnerability in Phpgurukul Cyber Cafe Management System 1.0 allows remote attackers to inject arbitrary web script or HTML via the admin username parameter...

6.2AI score0.00102EPSS
Exploits1References1
Rows per page
Query Builder