Lucene search
+L

5601 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•4 views

CVE-2025-0212: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /viewstudents.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00544EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/01/04 12:00 a.m.•18 views

Campcodes School Faculty Scheduling System 注入漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes. An injection vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter username in the file /admin/ajax.php?action=login that can cause SQL injecti...

9.8CVSS8AI score0.00652EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•18 views

The vulnerability of the web application for managing rental housing, the Campcodes House Rental System, arises from the lack of measures to protect the SQL query structure. This allows attackers to execute arbitrary SQL queries.

The vulnerability of the web application for managing rental housing, Campcodes House Rental System, is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS7.6AI score0.00645EPSS
SaveExploits1References6Affected Software1
Packet Storm
Packet Storm
•added 2024/09/10 12:00 a.m.•236 views

Online Student Grading System 1.0 SQL Injection

============================================================================================================================================= | Title : Online Student Grading System 1.0 Auth by pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
NVD
NVD
•added 2024/08/30 5:15 p.m.•28 views

CVE-2024-8344

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

8.8CVSS0.00465EPSS
SaveExploits1References5
CVE
CVE
•added 2024/08/30 4:31 p.m.•69 views

CVE-2024-8344

CVE-2024-8344 affects Campcodes Supplier Management System 1.0. The vulnerability is in /admin/edit_area.php where the id parameter can be manipulated to trigger SQL injection. It is exploitable remotely and exploitation has been disclosed publicly. Impact details in sources are limited; multiple...

8.8CVSS7.1AI score0.00465EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/30 4:31 p.m.•17 views

CVE-2024-8344 Campcodes Supplier Management System edit_area.php sql injection

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.5CVSS6.8AI score0.00465EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/08/30 4:31 p.m.•32 views

CVE-2024-8344 Campcodes Supplier Management System edit_area.php sql injection

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

6.5CVSS0.00465EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•3 views

CVE-2024-8344: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Supplier Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/editarea.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

8.8CVSS6.4AI score0.00465EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•11 views

Campcodes Supplier Management System SQL注入漏洞

Campcodes Supplier Management System is a supplier management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from a parameter id in the file /admin/editarea.php that can lead to SQL injection...

8.8CVSS7AI score0.00465EPSS
SaveExploits1References7
Packet Storm
Packet Storm
•added 2024/08/28 12:00 a.m.•335 views

File Management System 1.0 Arbitrary File Upload

============================================================================================================================================= | Title : File Management System 1.0 Arbitrary File upload Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefo...

7.4AI score
SaveExploits0
OSV
OSV
•added 2024/07/30 7:15 a.m.•17 views

CVE-2024-7221

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

9.8CVSS6.5AI score0.00631EPSS
SaveExploits1References4
OSV
OSV
•added 2024/07/30 6:15 a.m.•18 views

CVE-2024-7219

A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.9AI score0.00788EPSS
SaveExploits1References4
OSV
OSV
•added 2024/07/30 6:15 a.m.•13 views

CVE-2024-7220

A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/printbarcode.php. The manipulation of the argument tbl results in sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS5.7AI score0.00581EPSS
SaveExploits1References4
OSV
OSV
•added 2024/07/30 5:15 a.m.•14 views

CVE-2024-7218

A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=savestudent. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

6.1CVSS4.2AI score0.00512EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•5 views

CVE-2024-7218: Improper Neutralization of Input During Web Page Generation

A flaw has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected is an unknown function of the file /admin/ajax.php?action=savestudent. Executing manipulation of the argument Name can lead to cross site scripting. The attack may be performed from remote. The exploit ha...

6.1CVSS3.6AI score0.00512EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•5 views

CVE-2024-7221: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. This affects an unknown part of the file /admin/manageuser.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

9.8CVSS6.5AI score0.00631EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•7 views

CVE-2024-7220: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/printbarcode.php. The manipulation of the argument tbl results in sql injection. It is possible to launch the attack remotely. The exploi...

9.8CVSS6.4AI score0.00581EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/30 12:00 a.m.•5 views

CVE-2024-7219: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack...

9.8CVSS6.9AI score0.00788EPSS
SaveExploits1References1
OSV
OSV
•added 2024/07/24 8:15 p.m.•15 views

CVE-2024-41550

CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via SupplyManagementSystem/admin/viewinvoiceitems.php?id=...

7.2CVSS5.8AI score0.00488EPSS
SaveExploits1References1
Rows per page
Query Builder