Lucene search
K

15 matches found

OSV
OSV
added 2024/11/20 4:15 p.m.0 views

CVE-2024-11487

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

8.8CVSS5.7AI score0.00088EPSS
Exploits0References3
CVE
CVE
added 2024/11/20 4:0 p.m.44 views

CVE-2024-11487

CVE-2024-11487 affects Code4Berry Decoration Management System 1.0, specifically the file /decoration/admin/btndates_report.php within the Between Dates Reports component. The vulnerability arises from improper handling of the fromdate/todate parameters, enabling SQL injection. Exploitation can b...

8.8CVSS7.1AI score0.00088EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2024/11/20 4:0 p.m.16 views

CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

6.5CVSS0.00088EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/11/20 4:0 p.m.9 views

CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

6.5CVSS7.3AI score0.00088EPSS
Exploits0References3
OSV
OSV
added 2024/10/22 5:15 p.m.0 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS5.8AI score0.00115EPSS
Exploits1References1
NVD
NVD
added 2024/10/22 5:15 p.m.21 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

7.5CVSS0.00115EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/10/22 12:0 a.m.1 views

Client Management System SQL注入漏洞

Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...

7.5CVSS7.9AI score0.00115EPSS
Exploits1References2
CVE
CVE
added 2024/10/22 12:0 a.m.46 views

CVE-2024-48570

CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...

7.5CVSS8.3AI score0.00115EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/10/22 12:0 a.m.20 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

8.5AI score0.00115EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/10/22 12:0 a.m.1 views

PT-2024-33150 · Unknown · Client Management System

Name of the Vulnerable Software and Affected Versions: Client Management System version 1.0 Description: A SQL injection issue was discovered in the Client Management System via the Between Dates Reports parameter at the "/admin/bwdates-reports-ds.php" API endpoint. Recommendations: For Client...

7.5CVSS7.9AI score0.00115EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/10/22 12:0 a.m.11 views

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

0.00115EPSS
Exploits1References1
OSV
OSV
added 2024/04/17 6:15 p.m.1 views

CVE-2024-30985

SQL Injection vulnerability in "B/W Dates Reports" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "todate" and "fromdate" parameters...

9.8CVSS6.1AI score0.0015EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/11/05 12:0 a.m.1 views

PHPGurukul Hospital Management System 跨站脚本漏洞

PHPGurukul Hospital Management System is a PHP and MySQL based hospital management system. PHPGurukul Hospital Management System 4.0 has a security vulnerability that can be exploited by an attacker to conduct xss attacks using multiple parameters. The parameters that can be exploited are 1...

6.1CVSS6.3AI score0.00781EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2021/11/05 12:0 a.m.3 views

PT-2021-22580 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System version 4.0 Description: Multiple Cross Site Scripting XSS vulnerabilities exist in the system. The issue is related to the searchdata parameter in "/doctor/search.php" and "/admin/patient-search.php" API...

6.1CVSS6.1AI score0.00781EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/06/22 12:0 a.m.1 views

PT-2021-10740 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Hospital Management System in PHP version 4.0 Description: The issue concerns a SQL injection vulnerability located in the hmsadminbetweendates-detailsreports.php file. This vulnerability can be exploited by remote unauthenticated...

7.5CVSS7.6AI score0.01984EPSS
Exploits1References2
Rows per page
Query Builder