Lucene search
K

9 matches found

Packet Storm
Packet Storm
added 2022/05/11 12:0 a.m.229 views

Microfinance Management System 1.0 SQL Injection

Exploit Title: Microfinance Management System 1.0 - 'customernumber' SQLi Date: 2022-25-03 Exploit Author: Eren Gozaydin Vendor Homepage: https://www.sourcecodester.com/php/14822/microfinance-management-system.html Software Link:...

9.8CVSS0.2AI score0.81635EPSS
Exploits4
ATTACKERKB
ATTACKERKB
added 2022/04/19 1:15 p.m.1 views

CVE-2022-27927

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable coursecode and/or customernumber parameter...

9.8CVSS7.3AI score0.81635EPSS
Exploits4References5
OSV
OSV
added 2022/04/19 1:15 p.m.2 views

CVE-2022-27927

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable coursecode and/or customernumber parameter...

9.8CVSS5.8AI score
Exploits0References3
CNNVD
CNNVD
added 2022/04/19 12:0 a.m.1 views

Microfinance Management System SQL注入漏洞

Microfinance Management System is a microfinance management system by Adam Chengula, an individual developer. A security vulnerability exists in Microfinance Management System, which originates from an attacker being able to issue SQL commands to a MySQL database via the vulnerable coursecode...

9.8CVSS8.5AI score0.81635EPSS
Exploits4References6
Positive Technologies
Positive Technologies
added 2022/04/19 12:0 a.m.4 views

PT-2022-18694 · Unknown · Mysql Server +1

Name of the Vulnerable Software and Affected Versions: Microfinance Management System version 1.0 Description: A SQL injection issue exists when MySQL is used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course code and/or customer...

9.8CVSS9.7AI score0.81635EPSS
Exploits4References7
securityvulns
securityvulns
added 2013/12/09 12:0 a.m.59 views

vBulletin remote admin injection exploit

!/usr/bin/perl Title: vBulletin remote admin injection exploit Author: Simo Ben youssef Contact: SimoatMorxploitcom Coded: 17 September 2013 Published: 24 October 2013 MorXploit Research http://www.MorXploit.com Vendor: vBulletin www.vbulletin.com Version: 4.1.x / 5.x.x Vulnerability: Remote admi...

7.5AI score
Exploits0
Exploit DB
Exploit DB
added 2013/10/13 12:0 a.m.27 views

vBulletin 4.1.x - '/install/upgrade.php' Security Bypass

source: https://www.securityfocus.com/bid/62909/info vBulletin is prone to a security-bypass vulnerability. Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions. !/usr/bin/perl Title: vBulletin remote admin injection exploit Author: Simo...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2013/10/13 12:0 a.m.21 views

vBulletin 4.1.x - installupgrade.php Security Bypass

vBulletin 4.1.x - installupgrade.php Security Bypass source: https://www.securityfocus.com/bid/62909/info vBulletin is prone to a security-bypass vulnerability. Successful exploits can allow attackers to bypass certain security restrictions and perform unauthorized actions. !/usr/bin/perl Title:...

Exploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/07/31 12:0 a.m.17 views

JVN#43615794 Yayoi Kaikei improper handling of credential information

Yayoi Kaikei Quick Navigator makes the user log into the vendor's server, and sends the user credentials unencrypted. Impact By monitoring the communication between Quick Navigator and the vendor's server, an attacker can obtain the customer number and the phone number to impersonate the user on...

7.1AI score
Exploits0
Rows per page
Query Builder