Lucene search
K

3490 matches found

Cvelist
Cvelist
added 2023/11/14 12:0 a.m.21 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

6.8AI score0.00121EPSS
Exploits3References1
Vulnrichment
Vulnrichment
added 2023/11/14 12:0 a.m.13 views

CVE-2023-46022

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter...

8.2AI score0.00457EPSS
Exploits4References1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.4 views

PT-2023-29804 · Unknown · Code-Projects Blood Bank

Name of the Vulnerable Software and Affected Versions: Code-Projects Blood Bank version 1.0 Description: The issue allows attackers to execute arbitrary SQL commands. This is achieved by exploiting the bid parameter in the delete.php file. Recommendations: For Code-Projects Blood Bank version 1.0...

7.8CVSS7.8AI score0.00457EPSS
Exploits4References3
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.4 views

Code-Projects Simple Task List Security Vulnerability

Code-Projects Simple Task List is Code-Projects open source a simple task list system . Code-Projects Simple Task List version 1.0 has a security vulnerability , the vulnerability stems from allowing an attacker to obtain sensitive information through the status parameter in addTask.php...

6.5CVSS6.5AI score0.00121EPSS
Exploits3References2
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.2 views

Code-Projects Blood Bank Security Breach

Code-Projects Blood Bank is a blood bank system for the Code-Projects project. A security vulnerability exists in Code-Projects Blood Bank version 1.0 that originated from allowing an attacker to run arbitrary SQL commands via the bid parameter in delete.php...

7.8CVSS7.6AI score0.00457EPSS
Exploits4References3
CVE
CVE
added 2023/11/14 12:0 a.m.53 views

CVE-2023-46023

CVE-2023-46023 affects Code-Projects Simple Task List 1.0. The vulnerability is a SQL injection in addTask.php caused by improper handling of the status parameter, allowing an attacker to obtain sensitive information. Public sources (e.g., Exploit DB and PacketStorm) provide a PoC and exploit det...

6.5CVSS6.5AI score0.00121EPSS
Exploits3References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/14 12:0 a.m.12 views

CVE-2023-46023

SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 'status' parameter...

7.2AI score0.00121EPSS
Exploits3References1
Cvelist
Cvelist
added 2023/11/14 12:0 a.m.13 views

CVE-2023-46022

SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' parameter...

8.3AI score0.00457EPSS
Exploits4References1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.5 views

PT-2023-29805 · Unknown · Code-Projects Simple Task List

Name of the Vulnerable Software and Affected Versions: Code-Projects Simple Task List version 1.0 Description: A SQL injection issue allows attackers to obtain sensitive information by manipulating the status parameter in the "addTask.php" file. Recommendations: For Code-Projects Simple Task List...

6.5CVSS6.6AI score0.00121EPSS
Exploits3References2
CVE
CVE
added 2023/11/14 12:0 a.m.56 views

CVE-2023-46022

CVE-2023-46022 concerns Code-Projects Blood Bank v1.0, with a SQL Injection in delete.php via the bid parameter. The root cause is improper input handling in delete.php, enabling attackers to execute arbitrary SQL commands. Reported impact includes potential data exposure and unauthorized databas...

7.8CVSS8AI score0.00457EPSS
Exploits4References1Affected Software1
NVD
NVD
added 2023/11/13 11:15 p.m.10 views

CVE-2023-46020

Cross Site Scripting XSS in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 'remail', 'rphone' and 'rcity' parameters...

6.1CVSS0.00127EPSS
Exploits4References1
NVD
NVD
added 2023/11/13 11:15 p.m.17 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS0.00075EPSS
Exploits2References1
ATTACKERKB
ATTACKERKB
added 2023/11/13 11:15 p.m.2 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS6.1AI score0.00075EPSS
Exploits2References2
OSV
OSV
added 2023/11/13 11:15 p.m.0 views

CVE-2023-46021

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

5.5CVSS6AI score0.00075EPSS
Exploits2References1
OSV
OSV
added 2023/11/13 11:15 p.m.1 views

CVE-2023-46019

Cross Site Scripting XSS vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter...

6.1CVSS6AI score0.00127EPSS
Exploits2References1
NVD
NVD
added 2023/11/13 11:15 p.m.12 views

CVE-2023-46019

Cross Site Scripting XSS vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter...

6.1CVSS0.00127EPSS
Exploits2References1
Prion
Prion
added 2023/11/13 11:15 p.m.24 views

Cross site scripting

Cross Site Scripting XSS vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' parameter...

5.8CVSS6.4AI score0.00127EPSS
Exploits2References1Affected Software1
Prion
Prion
added 2023/11/13 11:15 p.m.15 views

Sql injection

SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' parameter...

1.7CVSS8.7AI score0.00075EPSS
Exploits2References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2023/11/13 10:15 p.m.2 views

CVE-2023-46016

Cross Site Scripting XSS in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in the application URL...

6.1CVSS6AI score0.00127EPSS
Exploits2References2
OSV
OSV
added 2023/11/13 10:15 p.m.2 views

CVE-2023-46015

Cross Site Scripting XSS vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' parameter in application URL...

6.1CVSS6AI score0.00127EPSS
Exploits3References1
Rows per page
Query Builder