Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 10:54 a.m.4 views

CVE-2022-23380

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin=2=edit...

8.8CVSS7.9AI score0.00239EPSS
Exploits1References1
OSV
OSV
added 2025/01/17 8:15 p.m.0 views

CVE-2025-0536

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS6.5AI score
Exploits0References5
CNNVD
CNNVD
added 2025/01/17 12:0 a.m.2 views

1000 Projects Attendance Tracking Management System 注入漏洞

1000 Projects Attendance Tracking Management System is an open source attendance management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Attendance Tracking Management System, which originates from the parameter attendanceid in file...

9.8CVSS7.1AI score0.00111EPSS
Exploits1References6
Prion
Prion
added 2007/08/31 11:17 p.m.14 views

Authentication flaw

xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via an unknown series of steps...

6.4CVSS7.5AI score0.07457EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2007/08/31 11:0 p.m.40 views

CVE-2007-4637

CVE-2007-4637 affects xGB.php in xGB 2.0, where an admin edit action does not require authentication. This allows remote attackers to perform unspecified changes via an unknown series of steps. The NVD entry lists a MEDIUM base score (6.4) with network attack vector, low complexity, and no user i...

6.4CVSS7AI score0.07457EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder