Lucene search
+L

1885 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•5 views

CVE-2024-12944: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /signin.php. The manipulation of the argument u/p leads to sql injection. The attack may be launched remotely. The exploit has...

9.8CVSS5.5AI score0.00683EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•15 views

PT-2024-17814 · Codeastro · Codeastro House Rental Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro House Rental Management System version 1.0 Description: A critical issue has been found in the CodeAstro House Rental Management System. The problem affects an unknown functionality of the file /ownersignup.php. Manipulation of the...

9.8CVSS7.8AI score0.00683EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•5 views

CVE-2024-12941: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Blood Donor Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/deletedannounce.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

8.8CVSS5.5AI score0.00479EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•13 views

CodeAstro Blood Donor Management System 注入漏洞

CodeAstro Blood Donor Management System is a blood donor management system from CodeAstro. An injection vulnerability exists in CodeAstro Blood Donor Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to SQL injection...

8.8CVSS7AI score0.00479EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•14 views

CodeAstro House Rental Management System 注入漏洞

CodeAstro House Rental Management System is a house rental management system from CodeAstro. An injection vulnerability exists in CodeAstro House Rental Management System version 1.0, which stems from an incorrect manipulation of the parameter u/p that can lead to SQL injection...

9.8CVSS7.9AI score0.00683EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•4 views

CVE-2024-12943: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro House Rental Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ownersignup.php. The manipulation of the argument f/e/p/m/o/n/c/s/ci/a leads to sql injection. The attack can be...

9.8CVSS5.5AI score0.00683EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•19 views

PT-2024-17812 · Codeastro · Codeastro Blood Donor Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Blood Donor Management System version 1.0 Description: A critical issue affects the processing of the file /pages/deletedannounce.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely...

8.8CVSS7AI score0.00479EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•15 views

CodeAstro House Rental Management System 注入漏洞

CodeAstro House Rental Management System is a house rental management system from CodeAstro. An injection vulnerability exists in CodeAstro House Rental Management System version 1.0, which stems from an incorrect manipulation of the parameter f/e/p/m/o/n/c/s/ci/a that can result in an SQL...

9.8CVSS7.9AI score0.00683EPSS
SaveExploits1References5
NVD
NVD
•added 2024/12/20 9:15 p.m.•22 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS0.00817EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/20 9:15 p.m.•14 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS6.1AI score0.00817EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/20 12:00 a.m.•33 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

0.00817EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/20 12:00 a.m.•10 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

8.8AI score0.00817EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/20 12:00 a.m.•16 views

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version 1.0, which stems from a SQL injection vulnerability that allows remote attackers to execute arbitrary code and elevate privileges...

9.8CVSS8.8AI score0.00817EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/20 12:00 a.m.•74 views

CVE-2024-55509

The CodeAstro Complaint Management System v.1.0 contains an SQL injection vulnerability within the delete.php component. A remote attacker can exploit the id parameter to execute arbitrary code and escalate privileges. As of the current documentation, no patched version is available. To mitigate ...

9.8CVSS8.5AI score0.00817EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•3 views

CVE-2024-55509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS6.7AI score0.00817EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/18 10:15 p.m.•35 views

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

8.8CVSS0.00696EPSS
SaveExploits0References1
OSV
OSV
•added 2024/12/18 10:15 p.m.•13 views

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

8.8CVSS5.8AI score0.00696EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/12/18 12:00 a.m.•11 views

CVE-2024-55505

An issue in CodeAstro Complaint Management System v.1.0 allows a remote attacker to escalate privileges via the mess-view.php component...

7.4AI score0.00696EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/12/18 12:00 a.m.•40 views

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

0.00704EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/18 12:00 a.m.•67 views

CVE-2024-55506

The CodeAstro Complaint Management System v1.0 is affected by an Insecure Direct Object Reference (IDOR) vulnerability. By modifying the id parameter within the delete.php file, an attacker can execute arbitrary code and obtain sensitive information . No specific remediation or exploit links are ...

8.8CVSS7.6AI score0.00704EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder