Lucene search
+L

4732 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•2 views

CVE-2024-12485: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Online Class and Exam Scheduling System 1.0. This issue affects some unknown processing of the file /pages/department.php. The manipulation of the argument id leads to sql injection. The attack may be initiated...

8.8CVSS5.5AI score0.00574EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-12490: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /pages/teachersave.php. The manipulation of the argument salut leads to sql injection. The attack can be initiated remotely...

9.8CVSS5.5AI score0.00761EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•13 views

code-projects Online Class and Exam Scheduling System 注入漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. An injection vulnerability exists in code-projects Online Class and Exam Scheduling System version 1.0, which stems from the parameter id of the file /pages/rankupdate.php...

8.8CVSS7.1AI score0.00574EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•11 views

Code-Projects Online Class and Exam Scheduling System 安全漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from a parameter id in the file /pages/subjectupdate.php...

8.8CVSS6.9AI score0.00574EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-12487: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/roomupdate.php. The manipulation of the argument id leads to sql injection. The attack can be...

8.8CVSS5.5AI score0.00574EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/12 12:00 a.m.•1 views

CVE-2024-12488: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /pages/subjectupdate.php. The manipulation of the argument id leads to sql injection. The attack may be launched...

8.8CVSS5.5AI score0.00574EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/12 12:00 a.m.•17 views

Code-Projects Online Class and Exam Scheduling System 注入漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. An injection vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from a parameter id in the file /pages/department.php th...

8.8CVSS7.1AI score0.00574EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/11 11:00 p.m.•30 views

CVE-2024-12492 code-projects Farmacia visualizar-usuario.php sql injection

A vulnerability was found in code-projects Farmacia 1.0. It has been rated as critical. This issue affects some unknown processing of the file /visualizar-usuario.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed ...

6.5CVSS0.00716EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/11 10:00 p.m.•14 views

CVE-2024-12489 code-projects Online Class and Exam Scheduling System term.php sql injection

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/term.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The...

6.5CVSS7.3AI score0.00574EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/11 9:31 p.m.•66 views

CVE-2024-12488

Code-Projects Online Class and Exam Scheduling System 1.0 is affected by a SQL injection in the /pages/subject_update.php file via the id parameter. The vulnerability, described across multiple sources (NVD, CVE records, CNVD, Red Hat, CNVD mirrors), indicates remote exploitation with publicly di...

8.8CVSS6.8AI score0.00574EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/11 8:31 p.m.•20 views

CVE-2024-12486 code-projects Online Class and Exam Scheduling System rank_update.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/rankupdate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. T...

6.5CVSS7.4AI score0.00574EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/09 5:00 a.m.•18 views

CVE-2024-12359 code-projects Admin Dashboard vendor_management.php cross site scripting

A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendormanagement.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.3CVSS6.6AI score0.00389EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/09 5:00 a.m.•40 views

CVE-2024-12359 code-projects Admin Dashboard vendor_management.php cross site scripting

A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendormanagement.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.3CVSS0.00389EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•1 views

CVE-2024-12360: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as critical. This issue affects some unknown processing of the file classupdate.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS5.5AI score0.00544EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•0 views

CVE-2024-12359: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Admin Dashboard 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /vendormanagement.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploi...

5.4CVSS3.9AI score0.00389EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•17 views

Code-Projects Admin Dashboard 安全漏洞

Code-Projects Admin Dashboard is an administration dashboard for Code-Projects open source. A security vulnerability exists in Code-Projects Admin Dashboard version 1.0, which stems from a cross-site scripting vulnerability contained in the username parameter of the /vendormanagement.php page...

5.4CVSS4.5AI score0.00389EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/09 12:00 a.m.•12 views

Code-Projects Online Class and Exam Scheduling System 安全漏洞

Code-Projects Online Class and Exam Scheduling System is an online class and exam scheduling system from Code-Projects, Inc. A security vulnerability exists in Code-Projects Online Class and Exam Scheduling System version 1.0, which stems from an SQL injection vulnerability contained in the id...

8.8CVSS7.1AI score0.00544EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/05 4:31 p.m.•74 views

CVE-2024-12233

CVE-2024-12233 affects code-projects Online Notice Board up to version 1.0, targeting the Profile Picture Handler. The flaw arises from processing the img argument in /registration.php, allowing unrestricted file uploads and enabling remote exploitation. Multiple connected sources corroborate a c...

9.8CVSS7.3AI score0.00829EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2024/12/05 4:15 p.m.•10 views

CVE-2024-12232

A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...

6.1CVSS3.8AI score0.00404EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/05 4:00 p.m.•52 views

CVE-2024-12232 code-projects Simple CRUD Functionality index.php cross site scripting

A vulnerability has been found in code-projects Simple CRUD Functionality 1.0 and classified as problematic. This vulnerability affects unknown code of the file /index.php. The manipulation of the argument newtitle/newdescr leads to cross site scripting. The attack can be initiated remotely. The...

5.3CVSS0.00404EPSS
SaveExploits1References5
Rows per page
Query Builder