Lucene search
+L

15345 matches found

Cvelist
Cvelist
•added 2022/01/24 3:34 p.m.•41 views

CVE-2021-41471

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

10AI score0.01228EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/24 3:15 p.m.•11 views

CVE-2021-40908

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS7.6AI score0.02534EPSS
SaveExploits1References2
EUVD
EUVD
•added 2022/01/24 2:54 p.m.•20 views

EUVD-2021-28063

SQL injection vulnerability in Login.php in Sourcecodester Purchase Order Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS10AI score0.02534EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•23 views

Sourcecodester Purchase Order Management System SQL Injection Vulnerability

Sourcecodester Purchase Order Management System is a simple purchase order management system used to manage the purchase order records of a particular company. SQL injection vulnerability exists in Sourcecodester Purchase Order Management System, which Sourcecodester Purchase Order Management...

9.8CVSS6.1AI score0.02534EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•10 views

CVE-2021-41471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS6.3AI score0.01228EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•9 views

CVE-2021-43420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.4AI score0.01289EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•19 views

South Gate Inn Online Reservation System SQL Injection Vulnerability

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System, which originated in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, and can be...

9.8CVSS8.8AI score0.01228EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/21 8:15 p.m.•26 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01368EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•18 views

Online Reviewer System SQL Injection Vulnerability

Online Reviewer System is a software application. An Online Reviewer System. A SQL injection vulnerability exists in Online Reviewer System, which originates from the product's password parameter not effectively filtering user input data for special characters. The vulnerability can be exploited ...

9.8CVSS8.7AI score0.0111EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/11 8:15 p.m.•29 views

CVE-2021-43971

A SQL injection vulnerability in /mobile/SelectUsers.jsp in SysAid ITIL 20.4.74 b10 allows a remote authenticated attacker to execute arbitrary SQL commands via the filterText parameter...

8.8CVSS0.01801EPSS
SaveExploits1References3
Prion
Prion
•added 2022/01/11 12:15 p.m.•37 views

Sql injection

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

6CVSS8.8AI score0.00843EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/11 12:00 a.m.•7 views

CVE-2021-37197: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been identified in COMOS V10.2 All versions only if web components are used, COMOS V10.3 All versions V10.3.3.3 only if web components are used, COMOS V10.4 All versions V10.4.1 only if web components are used. The COMOS Web component of COMOS is vulnerable to SQL injections...

8.8CVSS6.2AI score0.00843EPSS
SaveExploits0References3
Check Point Advisories
Check Point Advisories
•added 2021/12/21 12:00 a.m.•81 views

Hotel Druid SQL Injection (CVE-2021-37832)

An SQL injection vulnerability exists in Hotel Druid. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS4.6AI score0.04102EPSS
SaveExploits3
CNVD
CNVD
•added 2021/12/17 12:00 a.m.•63 views

Enalean Tuleap SQL Injection Vulnerability (CNVD-2021-103507)

Enalean Tuleap is a set of open source software development and project management tools from the French company Enalean. The tool provides enterprise application lifecycle management, as well as project tracking, source code management and team collaboration.Enalean Tuleap is vulnerable to SQL...

8.8CVSS3AI score0.01595EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/12/15 8:15 p.m.•31 views

CVE-2021-43806

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...

8.8CVSS7.5AI score0.01595EPSS
SaveExploits0References4
Mend
Mend
•added 2021/12/15 7:45 p.m.•11 views

CVE-2021-43806

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...

8.8CVSS0.01595EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•14 views

CVE-2021-43806: Improper Neutralization of Special Elements used in an SQL Command

Tuleap is a Libre and Open Source tool for end to end traceability of application and system developments. In affected versions Tuleap does not sanitize properly user settings when constructing the SQL query to browse and search commits in the CVS repositories. A authenticated malicious user with...

8.8CVSS6.1AI score0.01595EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/12/12 12:00 a.m.•103 views

Genesys Intelligent Workload Distribution SQL Injection Vulnerability (CNVD-2022-05704)

Genesys Intelligent Workload Distribution is an application from Genesys, Inc. Genesys intelligent Workload Distribution is vulnerable to SQL injection in 9.0.013.11, which can be exploited by attackers to execute arbitrary SQL queries via the "ql expression" parameter to execute arbitrary SQL...

7.2CVSS6.5AI score0.01738EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/12/09 12:00 a.m.•54 views

PayPal Free Source Code has an unspecified vulnerability

PayPal Free Source Code is an online registration management system. A security vulnerability exists in PayPal Free Source Code 1.0 online registration management system, which allows attackers to obtain sensitive information and execute arbitrary SQL commands via the IDNO parameter...

7.2CVSS6.4AI score0.01525EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/12/08 3:15 p.m.•11 views

CVE-2021-40860

A SQL Injection in the custom filter query component in Genesys intelligent Workload Distribution IWD before 9.0.013.11 allows an attacker to execute arbitrary SQL queries via the qlexpression parameter, with which all data in the database can be extracted and OS command execution is possible...

7.2CVSS7.4AI score0.01738EPSS
SaveExploits2References2
Rows per page
Query Builder