Lucene search
+L

708 matches found

Cvelist
Cvelist
•added 2024/12/27 1:00 a.m.•57 views

CVE-2024-12976 CodeZips Hospital Management System staff.php sql injection

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

7.5CVSS0.00692EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/12/27 1:00 a.m.•18 views

CVE-2024-12976 CodeZips Hospital Management System staff.php sql injection

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

7.5CVSS7.6AI score0.00692EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/27 1:00 a.m.•74 views

CVE-2024-12976

CVE-2024-12976 affects CodeZips Hospital Management System 1.0. Affected component: /staff.php where manipulation of the tel parameter enables SQL injection. The vulnerability is exploitable remotely and the exploit has been disclosed publicly. Several sources rate the issue as critical, with CVS...

9.8CVSS7.4AI score0.00692EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/12/27 12:00 a.m.•17 views

Codezips Hospital Management System 安全漏洞

Codezips Hospital Management System is an open source hospital management system from Codezips. A security vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect operation of the parameter tel that can lead to an SQL injection...

9.8CVSS7.8AI score0.00692EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•6 views

CVE-2024-12976: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in CodeZips Hospital Management System 1.0. Affected by this issue is some unknown functionality of the file /staff.php. The manipulation of the argument tel leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.5AI score0.00692EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/27 12:00 a.m.•15 views

PT-2024-17838 · Codezips · Codezips Hospital Management System

Name of the Vulnerable Software and Affected Versions: CodeZips Hospital Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file /staff.php. The manipulation of the tel argument leads to SQL injection. The attack c...

9.8CVSS8.1AI score0.00692EPSS
SaveExploits1References13
OSV
OSV
•added 2024/12/26 11:15 a.m.•19 views

CVE-2024-12947

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.8AI score0.00572EPSS
SaveExploits1References4
NVD
NVD
•added 2024/12/26 11:15 a.m.•39 views

CVE-2024-12947

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS0.00572EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/26 10:31 a.m.•90 views

CVE-2024-12947

CVE-2024-12947 affects Codezips Hospital Management System 1.0. The vulnerability is an SQL injection in the invo.php file triggered by manipulating the dname parameter, with remote attack possible and public exploits disclosed. Multiple sources corroborate the issue exists in an unknown function...

9.8CVSS6.8AI score0.00572EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2024/12/26 10:31 a.m.•51 views

CVE-2024-12947 Codezips Hospital Management System invo.php sql injection

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS0.00572EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/12/26 10:31 a.m.•14 views

CVE-2024-12947 Codezips Hospital Management System invo.php sql injection

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...

6.5CVSS7.3AI score0.00572EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/26 12:00 a.m.•1 views

CVE-2024-12947: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /invo.php. The manipulation of the argument dname leads to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.5AI score0.00572EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/26 12:00 a.m.•17 views

Codezips Hospital Management System 安全漏洞

Codezips Hospital Management System is an open source hospital management system from Codezips. A security vulnerability exists in Codezips Hospital Management System version 1.0, which stems from an incorrect operation of the parameter dname that can lead to SQL injection...

9.8CVSS6.9AI score0.00572EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/12/26 12:00 a.m.•59 views

PT-2024-17818 · Codezips · Codezips Hospital Management System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /invo.php. The manipulation of the dname argument leads to SQL injection. The attack can b...

9.8CVSS8.1AI score0.00572EPSS
SaveExploits1References10
OSV
OSV
•added 2024/12/25 8:15 p.m.•16 views

CVE-2024-12926

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

8.8CVSS5.8AI score0.00545EPSS
SaveExploits1References4
NVD
NVD
•added 2024/12/25 8:15 p.m.•39 views

CVE-2024-12926

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

8.8CVSS0.00545EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/12/25 8:00 p.m.•54 views

CVE-2024-12926 Codezips Project Management System advanced.php sql injection

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

6.5CVSS0.00545EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/25 8:00 p.m.•81 views

CVE-2024-12926

CVE-2024-12926 affects Codezips Project Management System version 1.0. The vulnerability is in /pages/forms/advanced.php, where manipulation of the name parameter leads to SQL injection. It can be exploited remotely and exploit details have been disclosed publicly. Practical impact includes poten...

8.8CVSS6.9AI score0.00545EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/25 8:00 p.m.•16 views

CVE-2024-12926 Codezips Project Management System advanced.php sql injection

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

6.5CVSS7AI score0.00545EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/25 12:00 a.m.•1 views

CVE-2024-12926: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Codezips Project Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/forms/advanced.php. The manipulation of the argument name leads to sql injection. The attack can be launched remotely. The...

8.8CVSS5.5AI score0.00545EPSS
SaveExploits1References1
Rows per page
Query Builder