Lucene search
+L

855 matches found

CNNVD
CNNVD
•added 2023/08/07 12:00 a.m.•21 views

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. SourceCodester Inventory Management System version 1.0 suffers from a SQL injection vulnerability in the columns1data parameter of the productdata.php file...

9.8CVSS8AI score0.00743EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/08/07 12:00 a.m.•17 views

PT-2023-28204 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue was found in the SourceCodester Inventory Management System, affecting the file catagory data.php. The manipulation of the columns1data argument leads to SQL...

7.5CVSS7.8AI score0.00611EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/08/07 12:00 a.m.•16 views

PT-2023-28209 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue has been found in the SourceCodester Inventory Management System, affecting the file product data.php. The manipulation of the columns1data argument leads to...

9.8CVSS8AI score0.00743EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/08/07 12:00 a.m.•17 views

PT-2023-28213 · Sourcecodester · Sourcecodester Inventory Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Inventory Management System version 1.0 Description: A critical issue affects the processing of the file ex catagory data.php, where the manipulation of the argument columns1data leads to sql injection. The attack can be...

9.8CVSS7.6AI score0.00743EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•6 views

CVE-2023-4201: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file excatagorydata.php. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The exploi...

9.8CVSS6.6AI score0.00743EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•4 views

CVE-2023-4200: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file productdata.php.. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS6.6AI score0.00743EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/07 12:00 a.m.•8 views

CVE-2023-4199: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catagorydata.php. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate the attack remotely. The...

7.5CVSS6.5AI score0.00611EPSS
SaveExploits1References2
Patchstack
Patchstack
•added 2023/07/19 12:00 a.m.•15 views

WordPress SV Columns Manager Plugin <= 1.9.00 is vulnerable to Cross Site Scripting (XSS)

Software SV Columns Manager Type Plugin Vulnerable versions = 1.9.00 Fixed in 2.0.00 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 8ae25831d9ac Credits Rafie Muhammad Patchstack...

6.2AI score0.00272EPSS
SaveExploits0References3Affected Software1
Patchstack
Patchstack
•added 2023/07/18 12:00 a.m.•13 views

WordPress WordPress Admin Tables Extra Columns : Easy way to create custom columns on WordPress post, page & user admin tables Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software WordPress Admin Tables Extra Columns : Easy way to create custom columns on WordPress post, page & user admin tables Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS...

6.3AI score0.00272EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
•added 2023/07/11 12:00 a.m.•254 views

Super Store Finder 3.6 SQL Injection

┌┌───────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An...

7.1AI score
SaveExploits0
OSV
OSV
•added 2023/05/29 5:14 p.m.•16 views

CLSA-2023-1685380447 Fix CVE(s): CVE-2023-2610

SECURITY UPDATE: Crash when expanding "" in substitute causes very long text - debian/patches/CVE-2023-2610.patch: Limit the text length to MAXCOL - CVE-2023-2610...

7.8CVSS6.7AI score0.00455EPSS
SaveExploits1References1
OSV
OSV
•added 2023/05/29 4:32 p.m.•18 views

CLSA-2023-1685377940 vim: Fix of CVE-2023-2610

CVE-2023-2610: limit the text length to MAXCOL...

7.8CVSS6.7AI score0.00455EPSS
SaveExploits1References1
CNVD
CNVD
•added 2023/05/19 12:00 a.m.•60 views

SQL Injection Vulnerability in Online Exam System Version v1.0

Online Exam System is an online exam system. Online Exam System v1.0 suffers from a SQL injection vulnerability that originates from the lack of validation of external input SQL statements in the parameters columns, data of /jurusanmatkul/data. An attacker can exploit this vulnerability to execut...

8.8CVSS8.3AI score0.00734EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/17 12:00 a.m.•2 views

CVE-2023-2771: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Exam System 1.0. This issue affects some unknown processing of the file /jurusanmatkul/data. The manipulation of the argument columns1data leads to sql injection. The attack may be initiated remotely. The...

8.8CVSS5.5AI score0.00734EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/17 12:00 a.m.•3 views

CVE-2023-2770: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Online Exam System 1.0. This vulnerability affects unknown code of the file /kelasdosen/data. The manipulation of the argument columns1data leads to sql injection. The attack can be initiated remotely. The exploit has been disclos...

8.8CVSS5.5AI score0.00734EPSS
SaveExploits1References2
OSV
OSV
•added 2023/05/14 12:15 p.m.•15 views

CVE-2023-2697

A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. Affected is an unknown function of the file /jurusan/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to launch the...

9.8CVSS6.6AI score0.0082EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/14 11:15 a.m.•16 views

CVE-2023-2696

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /matkul/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack may be...

9.8CVSS5.7AI score0.0082EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/14 10:15 a.m.•20 views

CVE-2023-2694

A vulnerability was found in SourceCodester Online Exam System 1.0. It has been classified as critical. This affects an unknown part of the file /dosen/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. It is possible to initiate th...

9.8CVSS5.7AI score0.0082EPSS
SaveExploits1References3
OSV
OSV
•added 2023/05/14 9:15 a.m.•20 views

CVE-2023-2693

A vulnerability was found in SourceCodester Online Exam System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /mahasiswa/data of the component POST Parameter Handler. The manipulation of the argument columns1data leads to sql injection. The attack...

9.8CVSS6.6AI score0.0082EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/14 12:00 a.m.•32 views

Online Exam System SQL注入漏洞

Online Exam System is an online exam system by oretnom23 individual developers. A SQL injection vulnerability exists in SourceCodester Online Exam System version 1.0, which stems from a problem with the file /dosen/data of the component POST Parameter Handler, where manipulation of the parameter...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References4
Rows per page
Query Builder