Lucene search
+L

756 matches found

CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•19 views

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/edit.php file...

9.8CVSS7AI score0.00756EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/07 12:00 a.m.•18 views

Online Courseware SQL Injection Vulnerabilities

DPEC Online Courseware is an online courseware system from DPEC Corporation. A SQL injection vulnerability exists in version 1.0 of Online Courseware, which originates from an SQL injection attack on the id parameter of the admin/editt.php file...

9.8CVSS7.3AI score0.00941EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•6 views

CVE-2024-3436: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in SourceCodester Prison Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /Admin/edit-photo.php of the component Avatar Handler. The manipulation of the argument avatar leads to unrestricted upload. The attack c...

7.2CVSS5.3AI score0.00912EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2024/04/03 1:16 p.m.•18 views

CVE-2024-3257

A vulnerability was found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/editactivityquery.php. The manipulation of the argument title/description/start/end leads to sql injection. The...

7.2CVSS5.8AI score0.00706EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/04/03 1:16 p.m.•23 views

CVE-2024-3256

A vulnerability has been found in SourceCodester Internship Portal Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/editactivity.php. The manipulation of the argument activityid leads to sql injection. The attack can be...

7.2CVSS5.7AI score0.00706EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2024/04/03 12:15 p.m.•17 views

CVE-2024-3254

A vulnerability, which was classified as critical, has been found in SourceCodester Internship Portal Management System 1.0. This issue affects some unknown processing of the file admin/editadmin.php. The manipulation of the argument adminid leads to sql injection. The attack may be initiated...

7.2CVSS5.7AI score0.00706EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•18 views

PT-2024-24691 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System, affecting some unknown functionality of the file admin/edit activity query.php...

7.2CVSS7.1AI score0.00706EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/04/03 12:00 a.m.•18 views

Internship Portal Management System Security Vulnerabilities

Internship Portal Management System is an internship portal management system by ChatikoboL individual developer. A security vulnerability exists in version 1.0 of the Internship Portal Management System due to an SQL injection vulnerability in the adminid parameter of the admin/editadmin.php fil...

7.2CVSS6.9AI score0.00706EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•21 views

PT-2024-24659 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting the processing of the file admin/edit admin.php. The manipulation...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2024/04/03 12:00 a.m.•19 views

PT-2024-24680 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting an unknown functionality of the file admin/edit activity.php. The...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References7
Packet Storm
Packet Storm
•added 2024/04/02 12:00 a.m.•564 views

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

7AI score
SaveExploits5
osv_cve
osv_cve
•added 2024/04/01 4:15 p.m.•17 views

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

9.8CVSS5.8AI score0.00734EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/04/01 12:00 a.m.•6 views

PT-2024-23643

Name of the Vulnerable Software and Affected Versions netentsec NS-ASG version 6.3 Description The issue is related to SQL Injection, which can be exploited via the "/admin/edit user login.php" API endpoint. Recommendations For netentsec NS-ASG version 6.3, consider restricting access to the...

9.8CVSS5.8AI score0.00696EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•19 views

NetentSec NS-ASG security vulnerability

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/edituserlogin.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•21 views

NetentSec NS-ASG security vulnerability

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editvirtualsiteinfo.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/21 12:00 a.m.•8 views

CVE-2024-2768: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complete Online Beauty Parlor Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack...

6.5CVSS5.5AI score0.00496EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/03/01 12:00 a.m.•22 views

Petrol Pump Management Software SQL Injection Vulnerability

Petrol Pump Management Software is a gasoline pump management software by mayurik individual developer. A SQL injection vulnerability exists in Petrol Pump Management Software version 1.0, which stems from an SQL injection issue in the /admin/editsupplier.php file...

7.2CVSS8AI score0.00547EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2024/02/29 1:43 a.m.•20 views

CVE-2024-1928

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

7.2CVSS5.6AI score0.00714EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•7 views

CVE-2024-1928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-admin.php of the component Edit User Profile Page. The manipulation of the argument Fullname lea...

7.2CVSS5.5AI score0.00714EPSS
SaveExploits1References3
osv_cve
osv_cve
•added 2024/01/17 6:15 p.m.•15 views

CVE-2024-22715

Stupid Simple CMS =1.2.4 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin-edit.php...

8.8CVSS5.8AI score0.00303EPSS
SaveExploits1References1
Rows per page
Query Builder