Lucene search
+L

34 matches found

OSV
OSV
•added 2023/04/02 7:15 a.m.•13 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/02 12:00 a.m.•18 views

PT-2023-17250 · Sourcecodester · Sourcecodester Simple Mobile Comparison Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Mobile Comparison Website version 1.0 Description: A critical issue was found in the file /admin/fields/manage field.php of the component GET Parameter Handler. The manipulation of the id argument leads to sql injection...

9.8CVSS6.9AI score0.00726EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/02 12:00 a.m.•4 views

CVE-2023-1792: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.5AI score0.00726EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/02 12:00 a.m.•14 views

Simple Mobile Comparison Website SQL注入漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. A SQL injection vulnerability exists in SourceCodester Simple Mobile Comparison Website version 1.0 due to an unknown function in the...

9.8CVSS7AI score0.00726EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•48 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77050)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•62 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77049)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/managefield.php?id=page. SQL injection problem, an attacker can use this...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/06/14 6:15 p.m.•10 views

CVE-2022-32365

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/managefield.php?id=...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References2
OSV
OSV
•added 2022/06/14 6:15 p.m.•11 views

CVE-2022-32366

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/viewfield.php?id=...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•13 views

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/managefield.php?id=page. SQL injection problem, an attacker can use this...

7.2CVSS6AI score0.00956EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/06/14 12:00 a.m.•18 views

Product Show Room Site SQL注入漏洞

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

7.2CVSS6AI score0.00956EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/14 12:00 a.m.•5 views

CVE-2022-32366: Improper Neutralization of Special Elements used in an SQL Command

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/fields/viewfield.php?id=...

7.2CVSS7.2AI score0.00956EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/05/23 9:16 p.m.•7 views

CVE-2022-30015

In Simple Food Website 1.0, a moderation can put the Cross Site Scripting Payload in any of the fields on http://127.0.0.1:1234/food/admin/allusers.php like Full Username, etc .This causes stored xss...

5.4CVSS5.9AI score0.00536EPSS
SaveExploits1References3
OSV
OSV
•added 2021/04/02 1:15 p.m.•13 views

CVE-2021-29011

DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting XSS via the description, name, or address field under admin.php...

6.1CVSS6.3AI score0.01392EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
•added 2020/03/12 12:00 a.m.•26 views

PT-2020-12140 · Chadha · Chadha Phpkb Standard Multi-Language

Name of the Vulnerable Software and Affected Versions: Chadha PHPKB Standard Multi-Language version 9 Description: The issue allows attackers to inject arbitrary web script or HTML via the sort parameter in the "admin/manage-fields.php" page, potentially leading to reflected XSS attacks...

4.8CVSS5.1AI score0.00611EPSS
SaveExploits1References4
Rows per page
Query Builder