Lucene search
+L

273 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/19 12:00 a.m.•0 views

CVE-2025-63719: Improper Neutralization of Special Elements used in an SQL Command

Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username...

7.3CVSS5.8AI score0.00203EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•11 views

EUVD-2006-2888

Malware in sbrugna...

2.6CVSS6.4AI score0.01883EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2006-5545

Malware in sbrugna...

4.3CVSS6.4AI score0.01317EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-3896

Malware in sbrugna...

2.6CVSS6.2AI score0.01927EPSS
SaveExploits4References9
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•14 views

EUVD-2012-1061

Malware in sbrugna...

5.8CVSS6.4AI score0.01835EPSS
SaveExploits2References5
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•12 views

EUVD-2009-4527

Malware in sbrugna...

6.8CVSS6.4AI score0.0085EPSS
SaveExploits1References3
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•21 views

EUVD-2019-5232

Malware in sbrugna...

8.8CVSS8.8AI score0.01269EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-6242

Malware in sbrugna...

7.5CVSS6.4AI score0.00952EPSS
SaveExploits1References3
NVD
NVD
•added 2025/09/15 10:15 p.m.•16 views

CVE-2025-10482

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

9.8CVSS0.00525EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-10482: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Online Student File Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be use...

9.8CVSS5.6AI score0.00525EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/03 12:00 a.m.•1 views

CVE-2025-9920: External Control of File Name or Path

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the...

7.2CVSS5.5AI score0.00458EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/09 12:00 a.m.•1 views

CVE-2025-8772: Server-Side Request Forgery (SSRF)

A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack m...

5.3CVSS5.1AI score0.00461EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/31 10:02 a.m.•33 views

CVE-2025-8378 Campcodes Online Hotel Reservation System Login index.php sql injection

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...

7.5CVSS0.00566EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•0 views

CVE-2025-8172: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit ha...

8.8CVSS5.5AI score0.00407EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/13 12:00 a.m.•11 views

PHPGurukul Vehicle Parking Management System 注入漏洞

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter Username in file /admin/index.php that lacks validation of an externally entered SQL statement. An attacker can...

9.8CVSS8.2AI score0.00511EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/13 12:00 a.m.•2 views

CVE-2025-7521: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS5.5AI score0.00511EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/08 12:00 a.m.•1 views

CVE-2025-7160: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

9.8CVSS5.5AI score0.01776EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/07/08 12:00 a.m.•13 views

PHPGurukul Zoo Management System 安全漏洞

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /admin/index.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.01776EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/07 12:00 a.m.•0 views

CVE-2025-7122: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.5AI score0.00472EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/22 12:00 a.m.•1 views

CVE-2025-6447: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

9.8CVSS5.5AI score0.00481EPSS
SaveExploits1References1
Rows per page
Query Builder