Lucene search
+L

272 matches found

CNNVD
CNNVD
added 2022/06/21 12:00 a.m.8 views

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/14 9:15 p.m.8 views

CVE-2022-32354

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=user/manageuser&id=...

7.2CVSS7.1AI score0.00929EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/14 6:15 p.m.9 views

CVE-2022-32364

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=products/manageproduct&id=...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 4:15 p.m.5 views

CVE-2022-32027

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/index.php?page=managecar&id=...

7.2CVSS5.9AI score0.00996EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/02 4:15 p.m.5 views

CVE-2022-32026

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/managebooking.php?id=...

7.2CVSS5.9AI score0.05308EPSS
SaveExploits1References3
OSV
OSV
added 2022/06/02 4:15 p.m.14 views

CVE-2022-32028

Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manageuser.php?id=...

7.2CVSS5.8AI score0.05059EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/02 2:15 p.m.9 views

CVE-2022-30808

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manageuploads.php...

9.8CVSS6.2AI score0.17458EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/02 2:15 p.m.6 views

CVE-2022-30808

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manageuploads.php...

9.8CVSS6.3AI score0.17458EPSS
SaveExploits1References2
Prion
Prion
added 2022/06/02 2:15 p.m.17 views

Code injection

elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manageuploads.php...

7.5CVSS9.6AI score0.17458EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.11 views

elitecms 代码问题漏洞

Elitecms is a web content management from elitecms India. elitecms 1.01 has an arbitrary code execution vulnerability that can be exploited by attackers to execute arbitrary code attacks via admin/manageuploads.php...

9.8CVSS6.5AI score0.17458EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/02 12:00 a.m.9 views

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=user/manage user&id=Lack of validation of external input SQL statements, an...

7.2CVSS6AI score0.04906EPSS
SaveExploits1References2
OSV
OSV
added 2022/05/26 5:15 p.m.9 views

CVE-2021-4232

A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input alert1 leads to cross site scripting. It is possible to launch the attack remotely...

6.1CVSS4AI score0.00511EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/05/26 12:00 a.m.9 views

PT-2022-11587 · Unknown · Zoo Management System

Name of the Vulnerable Software and Affected Versions: Zoo Management System version 1.0 Description: A problematic issue has been discovered, allowing for cross site scripting. This can be achieved by manipulating the input with alert1, which can be launched remotely. The issue is related to an...

6.1CVSS6AI score0.00511EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/05/26 12:00 a.m.10 views

Zoo Management System 安全漏洞

Zoo Management System 1.0 is a cross-site scripting vulnerability in Zoo Management System. The source of the vulnerability, admin/manage-ticket.php, has a problem with input value handling, which can be exploited to inject arbitrary html and script code into the website...

6.1CVSS5.5AI score0.00511EPSS
SaveExploits0References2
OSV
OSV
added 2022/05/13 2:15 p.m.9 views

CVE-2022-30379

Sourcecodester Simple Social Networking Site v1.0 is vulnerable to SQL Injection via /sns/admin/?page=user/manageuser&id=...

7.2CVSS5.8AI score0.00956EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/28 9:15 p.m.11 views

CVE-2022-23887

YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily delete user accounts via /admin/adminmanage/delete...

6.5CVSS6.6AI score0.00739EPSS
SaveExploits1References2
OSV
OSV
added 2021/01/11 8:15 p.m.6 views

CVE-2020-23631

Cross-site request forgery CSRF in admin/global/manage.php in WDJA CMS 1.5 allows remote attackers to conduct cross-site scripting XSS attacks via the tongji parameter...

6.1CVSS6.3AI score0.00471EPSS
SaveExploits1References2
CNVD
CNVD
added 2020/03/13 12:00 a.m.12 views

Chadha PHPKB cross-site scripting vulnerability (CNVD-2020-17353)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflected cross-site scripting vulnerability exists in admin/manage-articles.php in Chadha PHPKB Standard Multi-Language 9. The...

4.8CVSS6.1AI score0.00611EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/13 12:00 a.m.3 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-17368)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflected cross-site scripting vulnerability exists in admin/manage-templates.php in Chadha PHPKB Standard Multi-Language version ...

4.8CVSS6AI score0.00611EPSS
SaveExploits1References1
CNVD
CNVD
added 2020/03/13 12:00 a.m.6 views

Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-17363)

Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflected cross-site scripting vulnerability exists in admin/manage-groups.php in Chadha PHPKB Standard Multi-Language version 9...

4.8CVSS6AI score0.00611EPSS
SaveExploits1References1
Rows per page
Query Builder