Lucene search
+L

276 matches found

Vulnrichment
Vulnrichment
added 2025/10/30 11:32 p.m.4 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS6AI score0.01353EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/10/30 11:32 p.m.15 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS0.01353EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/30 11:32 p.m.24 views

CVE-2025-27208

Revive Adserver 5.5.2 is affected by a reflected Cross-Site Scripting (XSS) in admin-search.php via the compact parameter. An attacker able to lure a user with UI access into clicking a crafted URL can inject JavaScript to run in the victim’s browser; cookies aren’t exposed, but other actions may...

6.3CVSS5.6AI score0.01353EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2025/10/30 11:32 p.m.7 views

CVE-2025-27208

A reflected Cross-Site Scripting XSS vulnerability has been identified in Revive Adserver version 5.5.2. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code in the context o...

6.3CVSS6AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/30 12:00 a.m.21 views

PT-2025-44559

Name of the Vulnerable Software and Affected Versions Revive Adserver version 5.5.2 Description A reflected Cross-Site Scripting XSS issue exists in Revive Adserver version 5.5.2. An attacker could potentially cause a user with access to the user interface of a Revive Adserver instance to execute...

6.3CVSS5.9AI score0.01353EPSS
SaveExploits1References6
Hacker One
Hacker One
added 2025/10/22 9:18 p.m.23 views

Revive Adserver: Error-Based & Time-Based SQL Injection in 'keyword' Parameter of admin-search.php Allowing Full Database Access in Revive Adserver v6.0.0

==Cricetinae== Summary: A critical SQL Injection vulnerability has been identified in Revive Adserver's administrative search functionality, specifically in the admin-search.php file. The vulnerability exists in the handling of the keyword GET parameter, which is passed to multiple database queri...

8.8CVSS9.1AI score0.00918EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/10/14 6:44 a.m.16 views

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

9.8CVSS7AI score0.0042EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/13 7:15 a.m.9 views

CVE-2025-11664

A security vulnerability has been detected in Campcodes Online Beauty Parlor Management System 1.0. The impacted element is an unknown function of the file /admin/search-appointment.php. Such manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...

9.8CVSS5.8AI score0.0042EPSS
SaveExploits1References5
CNVD
CNVD
added 2025/10/13 12:00 a.m.14 views

Beauty Parlour Management System search-appointment.php File SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in file /admin/search-appointment.php. An attacker ca...

9.8CVSS8.3AI score0.00384EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/13 12:00 a.m.13 views

PT-2025-41758

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A security issue exists in Campcodes Online Beauty Parlor Management System version 1.0. Manipulation of the searchdata argument in an unknown function within the...

5.8CVSS4.8AI score0.0042EPSS
SaveExploits1References8
RedhatCVE
RedhatCVE
added 2025/10/10 1:31 a.m.8 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7.2AI score0.00384EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/08 10:15 p.m.10 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.7AI score0.00384EPSS
SaveExploits1References5
OSV
OSV
added 2025/10/08 10:15 p.m.9 views

CVE-2025-11507

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS5.8AI score
SaveExploits0References5
NVD
NVD
added 2025/10/08 10:15 p.m.11 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS0.00384EPSS
SaveExploits1References5
NVD
NVD
added 2025/10/08 10:15 p.m.11 views

CVE-2025-11507

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The attack can be initiated remotely. The exploit has been made...

9.8CVSS0.00384EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/08 10:02 p.m.7 views

EUVD-2025-33272

A weakness has been identified in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/search-invoices.php. This manipulation of the argument searchdata causes sql injection. The attack can be initiated remotely. The exploit has been made...

7.5CVSS6.5AI score0.00384EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2025/10/08 9:32 p.m.4 views

CVE-2025-11506

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.4AI score0.00384EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2025/10/08 9:32 p.m.27 views

CVE-2025-11506 PHPGurukul Beauty Parlour Management System search-appointment.php sql injection

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/search-appointment.php. The manipulation of the argument searchdata results in sql injection. It is possible to launch the attack remotely. The...

7.5CVSS0.00384EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.11 views

PT-2025-41314

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System 1.1 that allows for SQL injection. This occurs due to manipulation of the searchdata argument within an unknown...

9.8CVSS7.3AI score0.00384EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2025/10/08 12:00 a.m.15 views

PT-2025-41311

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A security flaw exists in PHPGurukul Beauty Parlour Management System 1.1. The issue involves SQL injection due to manipulation of the searchdata argument within an unknown...

9.8CVSS7.3AI score0.00384EPSS
SaveExploits1References9
Rows per page
Query Builder