Lucene search
K

608 matches found

Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.4 views

PT-2024-36441 · Unknown · Kashipara E-Learning Management System

Name of the Vulnerable Software and Affected Versions: Kashipara E-learning Management System version 1.0 Description: A SQL injection issue was found in the /admin/edit teacher.php endpoint, allowing remote attackers to execute arbitrary SQL commands and gain unauthorized access to the database...

9.8CVSS8.6AI score0.00571EPSS
Exploits1References5
OSV
OSV
added 2024/11/14 6:15 p.m.3 views

CVE-2024-50828

A SQL Injection vulnerability was found in /admin/editdepartment.php in kashipara E-learning Management System Project 1.0 via the d parameter...

7.2CVSS5.8AI score0.00379EPSS
Exploits1References1
OSV
OSV
added 2024/11/14 6:15 p.m.6 views

CVE-2024-50829

A SQL Injection vulnerability was found in /admin/editsubject.php in kashipara E-learning Management System Project 1.0 via the unit parameter...

7.2CVSS5.8AI score0.00379EPSS
Exploits1References1
OSV
OSV
added 2024/11/14 5:15 p.m.5 views

CVE-2024-50835

A SQL Injection vulnerability was found in /admin/editstudent.php in KASHIPARA E-learning Management System Project 1.0 via the cys, un, ln, fn, and id parameters...

7.2CVSS5.8AI score0.0058EPSS
Exploits1References1
OSV
OSV
added 2024/11/14 5:15 p.m.2 views

CVE-2024-50832

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

7.2CVSS5.8AI score0.0058EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/14 12:0 a.m.2 views

SourceCodester Best Employee Management System 安全漏洞

SourceCodester Best Employee Management System is a SourceCodester open source employee management system. A security vulnerability exists in SourceCodester Best Employee Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the...

7.2CVSS5.8AI score0.00512EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.5 views

PT-2024-34430 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: kashipara E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit class.php file via the class name parameter. This allows for potential exploitation. Recommendations: For kashipara...

7.2CVSS8AI score0.0058EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.4 views

PT-2024-34433 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /admin/edit student.php endpoint via the cys, un, ln, fn, and id parameters. This allows for potential unauthorized access to...

7.2CVSS7.6AI score0.0058EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/10/29 12:0 a.m.2 views

pb-cms 跨站脚本漏洞

pb-cms waterfall content management system is a content management system by LinZhaoguan personal developer. A cross-site scripting vulnerability exists in versions prior to pb-cms 2.0.1, which originates from the file /adminarticle/edit?id=2 of the component Edit Article Handler that can lead to...

5.4CVSS3.8AI score0.0028EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2024/10/29 12:0 a.m.5 views

PT-2024-16306 · Linzhaoguan · Linzhaoguan Pb-Cms

Name of the Vulnerable Software and Affected Versions: LinZhaoguan pb-cms versions up to 2.0.1 Description: A problematic issue has been found in the Edit Article Handler component, affecting the processing of the file "/adminarticle/edit?id=2". This leads to cross-site scripting, and the attack...

5.1CVSS4.2AI score0.0028EPSS
Exploits1References5
OSV
OSV
added 2024/10/27 11:15 a.m.6 views

CVE-2024-10414

A vulnerability, which was classified as problematic, was found in PHPGurukul Vehicle Record System 1.0. This affects an unknown part of the file /admin/edit-brand.php. The manipulation of the argument Brand Name leads to cross site scripting. It is possible to initiate the attack remotely. The...

4.8CVSS4AI score0.00383EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.4 views

PHPGurukul Vehicle Record System 跨站脚本漏洞

PHPGurukul Vehicle Record System is a vehicle record management system from PHPGurukul. A cross-site scripting vulnerability exists in PHPGurukul Vehicle Record System version 1.0, which originates from a cross-site scripting vulnerability in the Brand Name parameter of the /admin/edit-brand.php...

5.1CVSS3.9AI score0.00383EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/10/27 12:0 a.m.3 views

Petrol Pump Management Software SQL注入漏洞

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection vulnerability contained in the id parameter of the...

7.2CVSS7AI score0.00419EPSS
Exploits0References5
OSV
OSV
added 2024/10/26 10:15 p.m.3 views

CVE-2024-10406

A vulnerability, which was classified as critical, has been found in SourceCodester Petrol Pump Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/editfuel.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

7.2CVSS5.8AI score0.00419EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/10/26 12:0 a.m.4 views

Petrol Pump Management Software SQL注入漏洞

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which originates from a SQL injection vulnerability contained in the id parameter of the /admin/editfuel.php...

7.2CVSS7AI score0.00419EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/10/26 12:0 a.m.10 views

PT-2024-16250 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue was found in the software, affecting the /admin/edit customer.php file. The manipulation of the id argument leads to SQL injection. This issue can be...

7.2CVSS7.1AI score0.00419EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/10/26 12:0 a.m.4 views

PT-2024-16249 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /admin/edit fuel.php. The manipulation of the id argument leads to sql...

7.2CVSS7AI score0.00419EPSS
Exploits0References9
OSV
OSV
added 2024/10/23 7:15 p.m.1 views

CVE-2024-10298

A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/edit-card-detail.php of the component Managecard Edit Card Detail Page. The manipulation of the argument editid leads to sql injection. It is...

7.2CVSS5.7AI score0.0039EPSS
Exploits0References4
CNNVD
CNNVD
added 2024/10/20 12:0 a.m.3 views

PHPGurukul Boat Booking System SQL注入漏洞

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. A SQL injection vulnerability exists in PHPGurukul Boat Booking System version 1.0, which originates in the /admin/edit-subadmin.php page of the Edit Subdomain Details Page component, where sadminusername/fullname/...

7.2CVSS6.8AI score0.00513EPSS
Exploits1References6
OSV
OSV
added 2024/09/29 3:15 a.m.3 views

CVE-2024-9322

A vulnerability was found in code-projects Supply Chain Management 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/editmanufacturer.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS5.8AI score0.00408EPSS
Exploits0References5
Rows per page
Query Builder