321 matches found
EUVD-2024-22637
Malicious code in bioql PyPI...
EUVD-2023-52446
Malicious code in bioql PyPI...
EUVD-2022-32499
Malicious code in bioql PyPI...
EUVD-2024-16185
Malicious code in bioql PyPI...
EUVD-2022-32493
Malicious code in bioql PyPI...
WebITR 访问控制错误漏洞
WebITR is a poor attendance system from WebITR Corporation of Taiwan, China. WebITR suffers from an access control error vulnerability that stems from a lack of authentication, which could allow an unauthenticated remote attacker to log in to the system as an arbitrary user...
WebITR SQL注入漏洞
WebITR is a poor attendance system from WebITR Corporation of Taiwan, China. WebITR suffers from a SQL injection vulnerability that stems from susceptibility to SQL injection attacks and could lead to the execution of arbitrary SQL commands by an unauthenticated remote attacker...
CVE-2023-41521
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...
CVE-2023-41519
Student Attendance Management System v1 was discovered to contain a cross-site scripting XSS vulnerability via the sessionName parameter at createSessionTerm.php...
CVE-2023-41522
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parameters...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a cross-site scripting attack due to a misuse of the sessionName parameter in the...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the parameters Id, firstname and...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1, which is caused by a SQL injection due to incorrect manipulation of the username parameter in the fi...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system developed by rickxy individual developer. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the parameters id, termI...
Student Attendance Management System 安全漏洞
Student Attendance Management System is a student attendance management system developed by rickxy. A security vulnerability exists in Student Attendance Management System v1. The vulnerability stems from SQL injection due to incorrect manipulation of the classId and classArmName parameters in th...
CVE-2025-28972
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Suhas Surse WP Employee Attendance System wp-employee-attendance-system allows Blind SQL Injection.This issue affects WP Employee Attendance System: from n/a through = 3.5...
CVE-2025-28972
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Suhas Surse WP Employee Attendance System wp-employee-attendance-system allows Blind SQL Injection.This issue affects WP Employee Attendance System: from n/a through = 3.5...
CVE-2025-28972
CVE-2025-28972 is an SQL injection vulnerability in the WordPress plugin “WP Employee Attendance System” affecting version 3.5 and earlier. The described root cause is improper neutralization of special elements in SQL commands, enabling blind SQL injection. Public references indicate the issue i...
CVE-2025-28972 WordPress WP Employee Attendance System plugin <= 3.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Suhas Surse WP Employee Attendance System wp-employee-attendance-system allows Blind SQL Injection.This issue affects WP Employee Attendance System: from n/a through = 3.5...
CVE-2025-28972 WordPress WP Employee Attendance System <= 3.5 - SQL Injection Vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Suhas Surse WP Employee Attendance System allows Blind SQL Injection. This issue affects WP Employee Attendance System: from n/a through 3.5...