Lucene search
+L

756 matches found

Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•24 views

PT-2023-26611 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the contactno argument...

7.5CVSS7AI score0.00641EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•21 views

PT-2023-26622 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A problematic issue has been identified, affecting the /admin/edit product.php file. The manipulation of the id argument leads to cross-site scripting. This issue can be...

6.1CVSS4.2AI score0.00628EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•18 views

PT-2023-26630 · Unknown · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A vulnerability was found in the system, classified as problematic, affecting some unknown processing of the file /admin/edit category.php. The manipulation of the argument id...

6.1CVSS4.3AI score0.00549EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/25 12:00 a.m.•6 views

CVE-2023-3882: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Beauty Salon Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edit-accepted-appointment.php. The manipulation of the argument contactno leads to sql injection. The attack m...

7.5CVSS6.5AI score0.00641EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/25 12:00 a.m.•9 views

CVE-2023-3890: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit-accepted-appointment.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotel...

6.1CVSS3.9AI score0.00562EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/07/24 12:00 a.m.•20 views

PT-2023-26574 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical issue was found in the system, affecting the file /admin/edit-services.php. The manipulation of the editid argument leads to SQL injection. The attack can be initiat...

7.5CVSS7.1AI score0.00602EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/07/24 12:00 a.m.•20 views

Campcodes Beauty Salon Management System SQL Injection Vulnerability

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown section of admin/edit-services.php that causes a sql injection via the...

7.5CVSS6.9AI score0.00602EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/07/24 12:00 a.m.•19 views

PT-2023-26573 · Campcodes · Campcodes Beauty Salon Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Beauty Salon Management System version 1.0 Description: A critical vulnerability has been found in the Campcodes Beauty Salon Management System. This issue affects the file /admin/edit category.php and is related to the manipulation...

7.5CVSS7.3AI score0.00597EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/24 12:00 a.m.•11 views

CVE-2023-3872: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/edit-services.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has bee...

7.5CVSS6.5AI score0.00602EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/07/24 12:00 a.m.•29 views

Campcodes Beauty Salon Management System SQL Injection Vulnerability

Campcodes Beauty Salon Management System is a beauty salon management system from Campcodes. A SQL injection vulnerability exists in Campcodes Beauty Salon Management System version 1.0, which originates from an unknown section of the file admin/editcategory.php, which results in a sql injection...

7.5CVSS6.8AI score0.00597EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2023/06/30 7:15 a.m.•17 views

CVE-2023-3473

A vulnerability, which was classified as critical, was found in Campcodes Retro Cellphone Online Store 1.0. Affected is an unknown function of the file /admin/editproduct.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS5.7AI score0.0082EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/20 12:00 a.m.•34 views

SourceCodester Class Scheduling System SQL Injection Vulnerability

Class Scheduling System is a class scheduling system by jkev individual developer. A SQL injection vulnerability exists in SourceCodester Class Scheduling System version 1.0, which is caused by an unknown function in the file /admin/editsubject.php in the component GET Parameter Handler, which...

9.8CVSS7AI score0.00754EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/05/20 12:00 a.m.•24 views

PT-2023-21638 · Sourcecodester · Sourcecodester Class Scheduling System

Name of the Vulnerable Software and Affected Versions: SourceCodester Class Scheduling System version 1.0 Description: A critical issue was found in the SourceCodester Class Scheduling System, affecting an unknown functionality of the file /admin/edit subject.php, specifically the GET Parameter...

9.8CVSS7.1AI score0.00754EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2023/03/22 2:15 p.m.•24 views

CVE-2023-1569

A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/user/controller.php?action=edit. The manipulation of the argument UNAME with the input alert'1' leads to cross site scripting...

5.4CVSS3.8AI score0.00491EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2023/02/27 12:15 p.m.•20 views

CVE-2023-1061

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated...

8.8CVSS5.8AI score0.00759EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/27 12:00 a.m.•6 views

CVE-2023-1061: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0. This issue affects some unknown processing of the file /admin/edit-doc.php. The manipulation of the argument email/oldmail leads to sql injection. The attack may be initiated...

8.8CVSS5.5AI score0.00759EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•18 views

SourceCodester Doctor Appointment System SQL Injection Vulnerability

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in SourceCodester Doctors Appointment System version 1.0, which originates from an unknown function in the file /admin/edit-doc.p...

8.8CVSS7AI score0.007EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/02/27 12:00 a.m.•22 views

Doctors Appointment System SQL Injection Vulnerability

Doctors Appointment System is a doctor appointment system from SourceCodester. An injection vulnerability exists in Doctors Appointment System version 1.0, which stems from unknown processing in the file /admin/edit-doc.php, resulting in an sql injection via the parameter oldmail...

8.8CVSS6.9AI score0.00759EPSS
SaveExploits1References6
osv_cve
osv_cve
•added 2022/11/30 3:15 a.m.•20 views

CVE-2022-45328

Church Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/editmembers.php...

7.2CVSS5.8AI score0.00762EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/11/22 12:00 a.m.•22 views

PT-2022-27568 · Aerocms · Aerocms

Name of the Vulnerable Software and Affected Versions: AeroCMS version 0.0.1 Description: The issue allows attackers to access database information through a SQL Injection vulnerability. This vulnerability is exploited via the post category id parameter at the "adminincludesedit post.php" endpoin...

4.9CVSS8AI score0.00782EPSS
SaveExploits1References6
Rows per page
Query Builder