Lucene search
+L

646 matches found

OSV
OSV
•added 2024/12/29 7:15 a.m.•16 views

CVE-2024-13004

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.8AI score0.00749EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2024/12/29 6:31 a.m.•43 views

CVE-2024-13004 PHPGurukul Complaint Management System category.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS0.00749EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/12/29 6:31 a.m.•13 views

CVE-2024-13004 PHPGurukul Complaint Management System category.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

7.5CVSS7AI score0.00749EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/12/29 12:00 a.m.•16 views

PT-2024-17864 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 1.0 Description: A critical vulnerability has been found in the PHPGurukul Complaint Management System. This issue affects an unknown part of the file /admin/category.php. The manipulation of the...

9.8CVSS8.1AI score0.00749EPSS
SaveExploits1References13
CNNVD
CNNVD
•added 2024/12/29 12:00 a.m.•17 views

PHPGurukul Complaint Management System 注入漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from an SQL injection vulnerability that stems from a lack of sufficient validation of the input of the state parameter in the /admin/category.php file. No details of the vulnerability are available ...

9.8CVSS8AI score0.00749EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/29 12:00 a.m.•4 views

CVE-2024-13004: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/category.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00749EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/27 2:15 a.m.•32 views

CVE-2024-12977

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS0.00579EPSS
SaveExploits1References5
CVE
CVE
•added 2024/12/27 1:31 a.m.•72 views

CVE-2024-12977

The CVE-2024-12977 entry concerns PHPGurukul Complaint Management System 1.0. A SQL injection affects an unknown portion of /admin/state.php via the state parameter. The issue can be exploited remotely and exploits have been disclosed publicly. Sources consistently describe this as a critical vul...

9.8CVSS6.8AI score0.00579EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2024/12/27 1:31 a.m.•43 views

CVE-2024-12977 PHPGurukul Complaint Management System state.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

6.5CVSS0.00579EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/27 12:00 a.m.•4 views

CVE-2024-12977: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 1.0. This affects an unknown part of the file /admin/state.php. The manipulation of the argument state leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits1References1
Schneier on Security
Schneier on Security
•added 2024/12/23 5:04 p.m.•12 views

Criminal Complaint against LockBit Ransomware Writer

The Justice Department has published the criminal complaint against Dmitry Khoroshev, for building and maintaining the LockBit ransomware...

7.4AI score
SaveExploits0
NVD
NVD
•added 2024/12/20 9:15 p.m.•22 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS0.00817EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/20 9:15 p.m.•14 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS6.1AI score0.00817EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/20 12:00 a.m.•2 views

CVE-2024-55509: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

9.8CVSS6.7AI score0.00817EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/20 12:00 a.m.•33 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

0.00817EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/20 12:00 a.m.•14 views

CodeAstro Complaint Management System 安全漏洞

CodeAstro Complaint Management System is a complaint management system from CodeAstro. A security vulnerability exists in CodeAstro Complaint Management System version 1.0, which stems from a SQL injection vulnerability that allows remote attackers to execute arbitrary code and elevate privileges...

9.8CVSS8.8AI score0.00817EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/20 12:00 a.m.•10 views

CVE-2024-55509

SQL injection vulnerability in CodeAstro Complaint Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via the id parameter of the delete.php component...

8.8AI score0.00817EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/20 12:00 a.m.•68 views

CVE-2024-55509

The CodeAstro Complaint Management System v.1.0 contains an SQL injection vulnerability within the delete.php component. A remote attacker can exploit the id parameter to execute arbitrary code and escalate privileges. As of the current documentation, no patched version is available. To mitigate ...

9.8CVSS8.5AI score0.00817EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/12/18 11:15 p.m.•25 views

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

8.8CVSS0.00704EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/18 11:15 p.m.•12 views

CVE-2024-55506

An IDOR vulnerability in CodeAstro's Complaint Management System v1.0 version with 0 updates enables an attacker to execute arbitrary code and obtain sensitive information via the delete.php file and modifying the id parameter...

8.8CVSS6.1AI score0.00704EPSS
SaveExploits1References1
Rows per page
Query Builder