Lucene search
+L

4732 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•0 views

CVE-2024-12966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function cnupdate of the file /parse/alledits.php. The manipulation of the argument cname/url leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS5.6AI score0.00611EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•2 views

CVE-2024-12935: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Simple Admin Panel 1.0. This vulnerability affects unknown code of the file editItemForm.php. The manipulation of the argument record leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to t...

9.8CVSS5.5AI score0.00564EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12934: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Simple Admin Panel 1.0. This affects an unknown part of the file updateItemController.php. The manipulation of the argument pdesk leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.5AI score0.00395EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•12 views

Code-Projects Job Recruitment 注入漏洞

Code-Projects Job Recruitment is a job portal of Code-Projects open source. Code-Projects Job Recruitment version 1.0 has an injection vulnerability that originates from the parameter jobtype in the editjobpost function of the file /parse/alledits.php that can lead to SQL injection...

9.8CVSS7.8AI score0.00611EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12948: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Travel Management System 1.0. It has been classified as critical. This affects an unknown part of the file /detail.php. The manipulation of the argument pid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS5.5AI score0.00578EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•13 views

PT-2024-17808 · Unknown · Code-Projects Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: code-projects Simple Admin Panel version 1.0 Description: A critical vulnerability has been found in the file updateOrderStatus.php, affecting an unknown functionality. The manipulation of the record argument leads to SQL injection. The attac...

9.1CVSS8.4AI score0.00531EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12933: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file updateItemController.php. The manipulation of the argument pname/pdesc leads to cross site scripting. The attack may be launched...

5.4CVSS3.9AI score0.00397EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•12 views

Code-Projects Simple Admin Panel 安全漏洞

Code-Projects Simple Admin Panel is a simple admin panel from Code-Projects open source. A security vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from a cross-site scripting vulnerability in the pname and pdesc parameters of the updateItemController.php file...

5.4CVSS4.5AI score0.00397EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•14 views

Travel Management System 安全漏洞

Travel Management System is an open source travel management system from Code-Projects. A security vulnerability exists in Travel Management System version 1.0, which stems from an incorrect manipulation of the parameter pid that can lead to sql injection...

8.8CVSS6.7AI score0.00578EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•13 views

Code-Projects Simple Admin Panel 注入漏洞

Code-Projects Simple Admin Panel is a simple admin panel from Code-Projects. An injection vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from the parameter cname that causes SQL injection...

8.8CVSS7.1AI score0.00395EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•16 views

Code-Projects Simple Admin Panel 安全漏洞

Code-Projects Simple Admin Panel is a simple admin panel for Code-Projects open source. A security vulnerability exists in Code-Projects Simple Admin Panel version 1.0, which stems from a SQL injection vulnerability in the record parameter of the editItemForm.php file...

9.8CVSS7AI score0.00564EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12962: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /parse/alledits.php. The manipulation of the argument skillset leads to sql injection. The attack can be launched remotely. The...

7.5CVSS5.5AI score0.00612EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•19 views

PT-2024-17801 · Code Projects · Code-Projects Simple Admin Panel

Name of the Vulnerable Software and Affected Versions: code-projects Simple Admin Panel version 1.0 Description: A critical issue has been identified, allowing for SQL injection through the manipulation of the size argument in an unknown function of the file /addCatController.php. This can be...

8.8CVSS8AI score0.00538EPSS
SaveExploits0References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•2 views

CVE-2024-12939: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Job Recruitment 1.0. It has been rated as critical. This issue affects the function addedu of the file /parse/alledits.php. The manipulation of the argument degree leads to sql injection. The attack may be initiated remotely. The exploit has been disclos...

7.5CVSS5.6AI score0.00447EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12937: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. Affected is an unknown function of the file addVariationController.php. The manipulation of the argument qty leads to sql injection. It is possible to launch the attack remotely. The exploit has...

8.8CVSS5.5AI score0.00538EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12931: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Simple Admin Panel 1.0. It has been classified as critical. Affected is an unknown function of the file /addCatController.php. The manipulation of the argument size leads to sql injection. It is possible to launch the attack remotely. The exploit has bee...

8.8CVSS5.5AI score0.00538EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•2 views

CVE-2024-12969: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. T...

9.8CVSS5.5AI score0.00619EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/25 11:31 p.m.•16 views

CVE-2024-12928 code-projects Simple Admin Panel sql injection

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument cname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

6.5CVSS7.3AI score0.00395EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/12/25 11:31 p.m.•42 views

CVE-2024-12928 code-projects Simple Admin Panel sql injection

A vulnerability, which was classified as critical, was found in code-projects Simple Admin Panel 1.0. This affects an unknown part. The manipulation of the argument cname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may b...

6.5CVSS0.00395EPSS
SaveExploits0References4
CVE
CVE
•added 2024/12/25 11:31 p.m.•85 views

CVE-2024-12928

CVE-2024-12928 affects code-projects Simple Admin Panel 1.0. The vulnerability is a SQL injection triggered by the c_name parameter, with remote exploit possibility and publicly disclosed exploit. Multiple connected sources corroborate the issue, including Red Hat and PT Security entries referenc...

8.8CVSS6.8AI score0.00395EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder