Lucene search
+L

315 matches found

Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•13 views

PT-2023-17433 · Unknown · Campcodes Video Sharing Website

Name of the Vulnerable Software and Affected Versions: Campcodes Video Sharing Website version 1.0 Description: A critical issue has been found, affecting an unknown part of the file watch.php. The manipulation of the code argument leads to SQL injection. It is possible to initiate the attack...

9.8CVSS8AI score0.00791EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/15 4:15 p.m.•14 views

CVE-2023-1418

A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file cashconfirm.php of the component POST Parameter Handler. The manipulation of the argument...

6.1CVSS3.8AI score0.00578EPSS
SaveExploits1References3
Mend
Mend
•added 2023/01/20 12:00 a.m.•8 views

CVE-2023-23488

The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...

9.8CVSS0.9246EPSS
SaveExploits6References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/20 12:00 a.m.•4 views

CVE-2023-23488: Improper Neutralization of Special Elements used in an SQL Command

The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...

9.8CVSS5.9AI score0.9246EPSS
SaveExploits6References3
VulnCheck KEV
VulnCheck KEV
•added 2023/01/14 12:00 a.m.•10 views

VulnCheck KEV: CVE-2023-23488

The Paid Memberships Pro WordPress Plugin, version 2.9.8, is affected by an unauthenticated SQL injection vulnerability in the 'code' parameter of the '/pmpro/v1/order' REST route...

9.8CVSS8AI score0.9246EPSS
SaveIn wildExploits6References3
CNNVD
CNNVD
•added 2022/09/12 12:00 a.m.•16 views

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

7.5CVSS8AI score0.01039EPSS
SaveExploits1References4
OSV
OSV
•added 2022/09/06 6:15 p.m.•17 views

CVE-2022-2515

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...

5.4CVSS5.9AI score0.00977EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/09/06 6:15 p.m.•9 views

CVE-2022-2515

The Simple Banner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the proversionactivationcode parameter in versions up to, and including, 2.11.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, including those...

6.4CVSS6.3AI score0.00977EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/06/30 12:00 a.m.•19 views

MyAdmin 安全漏洞

MyAdmin is a backend management system for cdfan personal developers. A security vulnerability exists in MyAdmin v1.0, which stems from an incorrect access control vulnerability when viewing the Personal Center in /api/user/userData?userCode=admin...

4.9CVSS5.3AI score0.0086EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/05/19 12:00 a.m.•45 views

Covid-19 Travel Pass Management System SQL Injection Vulnerability

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A SQL injection vulnerability exists in Covid-19 Travel Pass Management System version 1.0, which stems from...

9.8CVSS9.5AI score0.01239EPSS
SaveExploits1References1
NVD
NVD
•added 2022/05/17 8:15 p.m.•24 views

CVE-2022-30054

In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks...

9.8CVSS0.01239EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/17 8:15 p.m.•27 views

Sql injection

In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks...

7.5CVSS9.8AI score0.01239EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/05/17 12:00 a.m.•6 views

PT-2022-19990

Name of the Vulnerable Software and Affected Versions Covid 19 Travel Pass Management version 1.0 Description The issue concerns a SQL injection vulnerability. Specifically, the code parameter is vulnerable to SQL injection attacks. Recommendations For Covid 19 Travel Pass Management version 1.0,...

9.8CVSS0.01239EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/05/17 12:00 a.m.•18 views

Covid-19 Travel Pass Management System SQL注入漏洞

Covid-19 Travel Pass Management System is a Covid-19 travel pass management system. It provides an online platform for individuals to submit travel passes within the Covid-19 restrictions. A SQL injection vulnerability exists in Covid-19 Travel Pass Management System version 1.0, which stems from...

9.8CVSS6AI score0.01239EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/17 12:00 a.m.•10 views

CVE-2022-30054: Improper Neutralization of Special Elements used in an SQL Command

In Covid 19 Travel Pass Management 1.0, the code parameter is vulnerable to SQL injection attacks...

9.8CVSS8.2AI score0.01239EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/05 5:15 p.m.•21 views

CVE-2022-28079

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the coursecode parameter...

8.8CVSS7.3AI score0.28512EPSS
SaveExploits5References4
attackerkb
attackerkb
•added 2022/05/05 5:15 p.m.•50 views

CVE-2022-28079

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the coursecode parameter...

8.8CVSS6AI score0.28512EPSS
SaveExploits5References6
CNNVD
CNNVD
•added 2022/05/05 12:00 a.m.•18 views

College Management System SQL注入漏洞

College Management System is a simple project. It is used to record students, instructors, subjects, schedules, and all things related to the university.College Management System v1.0 is vulnerable to a SQL injection vulnerability that stems from the coursecode parameter's lack of validation of...

8.8CVSS8.1AI score0.28512EPSS
SaveExploits5References9
OSV
OSV
•added 2022/04/19 1:15 p.m.•14 views

CVE-2022-27927

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable coursecode and/or customernumber parameter...

9.8CVSS5.8AI score0.13829EPSS
SaveExploits4References3
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•15 views

PT-2022-18694 · Unknown · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Microfinance Management System version 1.0 Description: A SQL injection issue exists when MySQL is used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course code and/or customer...

9.8CVSS9.7AI score0.13829EPSS
SaveExploits4References7
Rows per page
Query Builder