Lucene search
K

23 matches found

OSV
OSV
added 2024/08/07 4:15 p.m.1 views

CVE-2024-34480

SourceCodester Computer Laboratory Management System 1.0 allows admin/category/viewcategory.php id SQL Injection...

9.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2024/06/07 5:15 p.m.0 views

CVE-2024-30163

Invision Community before 4.7.16 allow SQL injection via the applications/nexus/modules/front/store/store.php IPS\nexus\modules\front\store\store::categoryView method, where user input passed through the filter request parameter is not properly sanitized before being used to execute SQL queries...

9.8CVSS5.9AI score
Exploits0References2
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.1 views

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/category/viewcategory.php, which leads to SQL injection via the parameter id...

9.8CVSS8.1AI score0.00514EPSS
Exploits1References2
OSV
OSV
added 2024/04/04 10:15 p.m.1 views

CVE-2024-3316

A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/viewcategory.php. The manipulation of the argument id leads to sql injection. The attack...

8.8CVSS5.7AI score0.00138EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/04/04 12:0 a.m.1 views

PT-2024-25137 · Sourcecodester · Sourcecodester Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Computer Laboratory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Computer Laboratory Management System, affecting an unknown functionality of the file /admin/category/view...

8.8CVSS7.2AI score0.00138EPSS
Exploits1References7
Vulnrichment
Vulnrichment
added 2022/12/14 12:0 a.m.6 views

CVE-2022-46122

Helmet Store Showroom Site v1.0 is vulnerable to SQL Injection via /hss/admin/categories/viewcategory.php?id=...

8.1AI score0.0026EPSS
Exploits1References1
OSV
OSV
added 2022/08/25 9:15 p.m.1 views

CVE-2022-36698

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /categories/viewcategory.php...

8.8CVSS5.8AI score0.00325EPSS
Exploits1References1
CVE
CVE
added 2022/08/25 8:41 p.m.52 views

CVE-2022-36698

CVE-2022-36698 concerns the Ingredients Stock Management System v1.0, which is affected by a SQL injection vulnerability in the id parameter of /categories/view_category.php. The issue is described across multiple sources (e.g., CVE details, CNVD/CNNVD entries) as an SQLi in the /categories/view_...

8.8CVSS8.9AI score0.00325EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/14 4:15 p.m.3 views

CVE-2022-32331

Fast Food Ordering System v1.0 is vulnerable to SQL Injection via /ffos/admin/categories/viewcategory.php?id=...

7.2CVSS5.8AI score0.00274EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/18 12:15 p.m.1 views

CVE-2022-28955

An access control issue in D-Link DIR816LFW206b01 allows unauthenticated attackers to access folders folderview.php and categoryview.php...

7.5CVSS5.9AI score0.92061EPSS
Exploits1References4
OSV
OSV
added 2022/05/18 12:15 p.m.0 views

CVE-2022-28955

An access control issue in D-Link DIR816LFW206b01 allows unauthenticated attackers to access folders folderview.php and categoryview.php...

7.5CVSS7.1AI score0.92061EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/05/18 12:0 a.m.4 views

D-Link DIR816 授权问题漏洞

The D-Link DIR816 is a wireless router from AUO D-Link of Taiwan, China. The D-Link DIR816L suffers from an Access Control Error vulnerability that stems from improper access control. An unauthenticated attacker could use this vulnerability to gain access to the folders folderview.php and...

7.5CVSS5.6AI score0.92061EPSS
Exploits1References3
CNVD
CNVD
added 2018/03/29 12:0 a.m.2 views

D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router Authentication Bypass Vulnerability

D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router is a wireless router product from AUO D-Link. An authentication bypass vulnerability exists in the D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router. The vulnerability can be exploited to bypass the SharePort Web Access...

9.8CVSS7.2AI score0.85549EPSS
Exploits4References1
ATTACKERKB
ATTACKERKB
added 2018/03/27 3:29 a.m.2 views

CVE-2018-9032

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router Hardware Version : A1, B1; Firmware Version : 1.02-2.06 devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /categoryview.php or /folderview.php...

9.8CVSS5.6AI score0.85549EPSS
Exploits4References3
OSV
OSV
added 2018/03/27 3:29 a.m.3 views

CVE-2018-9032

An authentication bypass vulnerability on D-Link DIR-850L Wireless AC1200 Dual Band Gigabit Cloud Router Hardware Version : A1, B1; Firmware Version : 1.02-2.06 devices potentially allows attackers to bypass SharePort Web Access Portal by directly visiting /categoryview.php or /folderview.php...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2017/12/27 5:8 p.m.1 views

CVE-2017-17875

The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action...

9.8CVSS5.8AI score0.01411EPSS
Exploits5References1
0day.today
0day.today
added 2016/10/22 12:0 a.m.23 views

Just Dial Clone Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2016/10/21 12:0 a.m.10 views

Just Dial Clone Script - srch SQL Injection

Just Dial Clone Script - srch SQL Injection Exploit Title: SQL Injection in Just Dial Clone Script Date: 20 October 2016 Exploit Author: Arbin Godar Website : ArbinGodar.com Vendor: http://www.i-netsolution.com/...

0.7AI score
Exploits0
Citrix
Citrix
added 2016/09/26 12:0 a.m.4 views

How to display the Featured apps group under the "Category" view than the "All" view on storefront website

Remove Featured app groups from All view and display under Categories view...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2013/09/09 12:0 a.m.49 views

Joomla com_sectionex v2.5.96 SQL Injection vulnerabilities

------------------------------------------------------------------------------------- Joomla comsectionex v2.5.96 SQL Injection vulnerabilities ------------------------------------------------------------------------------------- == Description == - Software link: http://stackideas.com/sectionex ...

0.4AI score
Exploits0
Rows per page
Query Builder