Lucene search
+L

239 matches found

CNNVD
CNNVD
added 2024/05/16 12:00 a.m.13 views

Simple Online Bidding System SQL注入漏洞

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. SourceCodester Simple Online Bidding System version 1.0 suffers from a SQL injection vulnerability that originates from /simple-online-bidding-system/admin/index.php contains unknown processing, which lead...

9.8CVSS6.9AI score0.00584EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/16 12:00 a.m.15 views

PT-2024-33471 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /simple-online-bidding-system/admin/index.php?page=manage product. The...

9.8CVSS7AI score0.00584EPSS
SaveExploits1References7
OSV
OSV
added 2024/03/01 7:15 p.m.10 views

CVE-2024-2077

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.4AI score0.00658EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/01 7:15 p.m.30 views

CVE-2024-2077

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.8AI score0.00658EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/01 7:15 p.m.24 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.7AI score0.00658EPSS
SaveExploits1References3
CVE
CVE
added 2024/03/01 6:31 p.m.105 views

CVE-2024-2077

The CVE-2024-2077 entry concerns SourceCodester Simple Online Bidding System 1.0. Affected component: index.php, where manipulating the category_id parameter enables SQL injection. Impact stated as high confidentiality, integrity, and availability risk, with remote exploitation possible and explo...

9.8CVSS6.8AI score0.00658EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/01 6:31 p.m.20 views

CVE-2024-2077 SourceCodester Simple Online Bidding System index.php sql injection

A vulnerability classified as critical has been found in SourceCodester Simple Online Bidding System 1.0. This affects an unknown part of the file index.php. The manipulation of the argument categoryid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS7.7AI score0.00658EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/01 12:00 a.m.12 views

Simple Online Bidding System SQL Injection Vulnerability

Simple Online Bidding System is an online bidding system by oretnom23 individual developer. A SQL injection vulnerability exists in Simple Online Bidding System version 1.0, which stems from a parameter categoryid in the file index.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00658EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/01 12:00 a.m.12 views

PT-2024-18702 · Sourcecodester · Sourcecodester Simple Online Bidding System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Bidding System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file index.php. The manipulation of the category id argument leads to SQL injection. It is...

9.8CVSS8.2AI score0.00658EPSS
SaveExploits1References6
CNVD
CNVD
added 2021/04/22 12:00 a.m.9 views

File Upload Vulnerability in Easy Tender's Corporate Bidding and Procurement Platform

Shanghai Huizhao Information Technology Co., Ltd. is a comprehensive service provider of electronic bidding system, specializing in the provision of electronic bidding software development and trading platform operation and other services. A file upload vulnerability exists in the E-Tendering...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/07/09 12:00 a.m.4 views

SQL Injection Vulnerability in Electronic Tendering System of Gansu Chengxing Information Technology Co.

Gansu Chengxing Information Technology Co., Ltd. developed to meet the needs of various types of public resource transactions, can provide timely, reliable and effective support for the Chengxing public resource trading platform. Gansu Chengxing Information Technology Co., Ltd. electronic bidding...

7.9AI score
SaveExploits0
CNVD
CNVD
added 2019/02/18 12:00 a.m.5 views

SQL Injection Vulnerability in Sl***_Pa***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System

Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. A sql injection vulnerability exists in the backend...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/02/18 12:00 a.m.2 views

SQL Injection Vulnerability in Sl***_Qu***.aspx of Bid 1.0 Backend of Qixing Engineering Bidding System

Qixing Bidding System is suitable for enterprises to collect information on government procurement, engineering construction, land grant and other bidding information, and to track the progress of works and payment of successful projects. A sql injection vulnerability exists in the back-end...

7.3AI score
SaveExploits0
CNVD
CNVD
added 2019/02/10 12:00 a.m.5 views

SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06238)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/10 12:00 a.m.6 views

SQL Injection Vulnerability in Bidding System Bid Frontend Wo***.aspx Page

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2019/02/10 12:00 a.m.6 views

SQL injection vulnerability in the sl***.aspx page of the Bid frontend of Qixing bidding system Bid (CNVD-2019-06239)

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2018/12/26 12:00 a.m.9 views

SQL Injection Vulnerability in Bidding System Bid Frontend ge***.aspx Page

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2018/12/26 12:00 a.m.8 views

SQL Injection Vulnerability in Bidding System Bid Frontend sl***.aspx Page

Qixing Bidding System Bid is a system suitable for enterprises to collect information on bidding information of government procurement, engineering construction, land grant, etc., and to track the progress of works and payment of successful projects. A SQL injection vulnerability exists in the...

7.6AI score
SaveExploits0
CNVD
CNVD
added 2016/10/12 12:00 a.m.6 views

SQL Injection Vulnerability in Bidding Member System of Jiangsu Guotai New Point Software Co.

An electronic bidding system is a means of trading on a public resources trading platform. There is a SQL injection vulnerability in the bidding membership system of Jiangsu Guotai New Point Software Co., Ltd. that can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
SaveExploits0
Rows per page
Query Builder