Lucene search
+L

146 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•4 views

CVE-2024-12928: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument cname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

8.8CVSS5.5AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•6 views

CVE-2024-12937: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.5AI score0.00567EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•8 views

CVE-2024-12935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00594EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•2 views

CVE-2024-12933: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched...

5.4CVSS3.9AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•4 views

CVE-2024-12930: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Simple Admin Panel 1.0 and classified as problematic. This issue affects some unknown processing of the file addCatController.php. The manipulation of the argument cname leads to cross site scripting. The attack may be initiated remotely...

5.3CVSS4AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•5 views

CVE-2024-12934: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument pdesk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.5AI score0.00415EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•5 views

CVE-2024-12936: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Simple Admin Panel 1.0. This issue affects some unknown processing of the file catDeleteController.php. The manipulation of the argument record leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS5.5AI score0.00594EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/25 11:31 p.m.•88 views

CVE-2024-12928

CVE-2024-12928 affects code-projects Simple Admin Panel 1.0. The vulnerability is a SQL injection triggered by the c_name parameter, with remote exploit possibility and publicly disclosed exploit. Multiple connected sources corroborate the issue, including Red Hat and PT Security entries referenc...

8.8CVSS6.8AI score0.00415EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/05 12:00 a.m.•6 views

CVE-2024-12232: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...

6.1CVSS3.8AI score0.00404EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/05 12:00 a.m.•4 views

PT-2024-17499

Name of the Vulnerable Software and Affected Versions code-projects Simple CRUD Functionality version 1.0 Description A vulnerability has been found in the code and classified as problematic. This issue affects unknown code of the file /index.php. The manipulation of the newtitle and newdescr...

6.1CVSS0.00404EPSS
SaveExploits1References10
Vulnrichment
Vulnrichment
•added 2024/11/28 3:31 p.m.•19 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00908EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/08/09 12:31 p.m.•53 views

CVE-2024-7635 code-projects Simple Ticket Booking Registration register_insert.php sql injection

A vulnerability was found in code-projects Simple Ticket Booking 1.0. It has been classified as critical. Affected is an unknown function of the file registerinsert.php of the component Registration Handler. The manipulation of the argument name/email/dob/password/Gender/phone leads to sql...

7.5CVSS7.3AI score0.00817EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/11 12:00 a.m.•20 views

CVE-2024-6653 code-projects Simple Task List Login loginForm.php sql injection

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

7.5CVSS7.5AI score0.00797EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•3 views

PT-2024-37780

Name of the Vulnerable Software and Affected Versions code-projects Simple Task List version 1.0 Description A critical issue has been found in the code-projects Simple Task List, affecting the file loginForm.php of the Login component. The manipulation of the username argument leads to SQL...

9.8CVSS5.5AI score0.00797EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/11 12:00 a.m.•6 views

CVE-2024-6653: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Task List 1.0. It has been declared as critical. This vulnerability affects unknown code of the file loginForm.php of the component Login. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS7AI score0.00797EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/16 10:15 a.m.•41 views

CVE-2024-4973

A vulnerability classified as critical was found in code-projects Simple Chat System 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument name/number/address leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.9AI score0.00649EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/05/16 9:31 a.m.•27 views

CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

5.3CVSS6.2AI score0.0048EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/05/16 9:31 a.m.•57 views

CVE-2024-4974 code-projects Simple Chat System register.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an unknown function of the file /register.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has be...

5.3CVSS4.1AI score0.0048EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•27 views

PT-2024-33660 · Unknown · Code-Projects Simple Chat System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Chat System version 1.0 Description: A problematic issue was found in the code-projects Simple Chat System, affecting an unknown function of the file /register.php. The manipulation of the name argument leads to cross-sit...

6.1CVSS6.6AI score0.0048EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/16 12:00 a.m.•7 views

CVE-2024-4975: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue affects some unknown processing of the component Message Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

6.1CVSS3.8AI score0.0048EPSS
SaveExploits1References1
Rows per page
Query Builder