Lucene search
K

630 matches found

OSV
OSV
added 2024/11/25 9:15 a.m.0 views

CVE-2024-11663

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

9.8CVSS5.8AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/11/25 8:31 a.m.10 views

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

7.5CVSS7.4AI score0.00089EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/11/25 8:31 a.m.18 views

CVE-2024-11663 Codezips E-Commerce Site search.php sql injection

A vulnerability classified as critical was found in Codezips E-Commerce Site 1.0. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument keywords leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

7.5CVSS0.00089EPSS
Exploits1References4
CVE
CVE
added 2024/11/25 8:31 a.m.56 views

CVE-2024-11663

Codezips E-Commerce Site 1.0 (search.php) is affected. The root cause is manipulation of the keywords argument, leading to an SQL injection vulnerability. The issue can be exploited remotely and has been publicly disclosed. Affected components: the search.php functionality; the vulnerability impa...

9.8CVSS7.5AI score0.00089EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2024/11/25 8:15 a.m.15 views

CVE-2024-11661

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The...

9.8CVSS0.00072EPSS
Exploits1References4
OSV
OSV
added 2024/11/25 8:15 a.m.2 views

CVE-2024-11661

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The...

9.8CVSS4.9AI score
Exploits0References4
Vulnrichment
Vulnrichment
added 2024/11/25 7:31 a.m.9 views

CVE-2024-11661 Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The...

5.3CVSS4.8AI score0.00072EPSS
Exploits1References4
CVE
CVE
added 2024/11/25 7:31 a.m.43 views

CVE-2024-11661

The CVE-2024-11661 entry concerns Codezips Free Exam Hall Seating Management System 1.0, specifically the Profile Image Handler's profile.php. The vulnerability is triggered by manipulating the image parameter, leading to unrestricted file upload. It is described as exploitable remotely, with the...

9.8CVSS4.9AI score0.00072EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/11/25 7:31 a.m.14 views

CVE-2024-11661 Codezips Free Exam Hall Seating Management System Profile Image profile.php unrestricted upload

A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file profile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. The...

5.3CVSS0.00072EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/25 12:0 a.m.1 views

E-Commerce Site 注入漏洞

E-Commerce Site is an open source e-commerce site by Codezips. An injection vulnerability exists in E-Commerce Site version 1.0, which stems from an incorrect manipulation of the parameter keywords that can lead to sql injection...

9.8CVSS7.5AI score0.00089EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/25 12:0 a.m.2 views

Codezips Free Exam Hall Seating Management System 安全漏洞

Codezips Free Exam Hall Seating Management System is a free exam hall seating management system from Codezips open source. A security vulnerability exists in Codezips Free Exam Hall Seating Management System version 1.0, which stems from an incorrect manipulation of the parameter image that can...

9.8CVSS4.9AI score0.00072EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/11/25 12:0 a.m.4 views

PT-2024-17173 · Unknown · Codezips E-Commerce Site

Name of the Vulnerable Software and Affected Versions: Codezips E-Commerce Site version 1.0 Description: A critical issue was found in the file search.php, where the manipulation of the keywords argument leads to sql injection. The attack can be launched remotely. The exploit has been disclosed t...

9.8CVSS7.5AI score0.00089EPSS
Exploits1References9
NVD
NVD
added 2024/11/10 6:15 p.m.12 views

CVE-2024-11057

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

9.8CVSS0.00097EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/11/10 6:0 p.m.13 views

CVE-2024-11057 Codezips Hospital Appointment System removeBranchResult.php sql injection

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

7.5CVSS0.00097EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/11/10 6:0 p.m.12 views

CVE-2024-11057 Codezips Hospital Appointment System removeBranchResult.php sql injection

A vulnerability has been found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /removeBranchResult.php. The manipulation of the argument ID/Name leads to sql injection. The attack can be launched...

7.5CVSS7.5AI score0.00097EPSS
Exploits1References4
CVE
CVE
added 2024/11/10 6:0 p.m.41 views

CVE-2024-11057

CVE-2024-11057 is a confirmed vulnerability in Codezips Hospital Appointment System 1.0. The weakness resides in the file /removeBranchResult.php, where manipulation of the ID/Name parameter enables SQL injection. It is described as remotely exploitable, with public disclosures of exploits. Multi...

9.8CVSS7.7AI score0.00097EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/10 12:0 a.m.2 views

PT-2024-16729 · Unknown · Codezips Hospital Appointment System

Name of the Vulnerable Software and Affected Versions: Codezips Hospital Appointment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /removeBranchResult.php. The manipulation of the ID/Name argument leads to sql...

9.8CVSS7.7AI score0.00097EPSS
Exploits1References11
CNNVD
CNNVD
added 2024/11/10 12:0 a.m.1 views

Codezips Hospital Appointment System 注入漏洞

Codezips Hospital Appointment System is Codezips open source a hospital appointment system. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter ID/Name in the file /removeBranchResult.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00097EPSS
Exploits1References4
NVD
NVD
added 2024/11/08 7:15 a.m.8 views

CVE-2024-10995

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS0.00097EPSS
Exploits1References4
OSV
OSV
added 2024/11/08 7:15 a.m.1 views

CVE-2024-10995

A vulnerability was found in Codezips Hospital Appointment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /removeDoctorResult.php. The manipulation of the argument Name leads to sql injection. The attack may be launched remotely. The exploi...

9.8CVSS5.8AI score0.00097EPSS
Exploits1References4
Rows per page
Query Builder