Lucene search
+L

5 matches found

OSV
OSV
•added 2024/06/27 1:16 p.m.•15 views

CVE-2024-6372

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It is possible to...

9.8CVSS6.4AI score0.00612EPSS
SaveExploits1References4
NVD
NVD
•added 2024/06/27 1:16 p.m.•38 views

CVE-2024-6372

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It is possible to...

9.8CVSS0.00612EPSS
SaveExploits1References4
CVE
CVE
•added 2024/06/27 1:00 p.m.•73 views

CVE-2024-6372

Summary (CVE-2024-6372): A SQL injection vulnerability exists in Tailoring Management System v1.0, affecting the file customeradd.php. The issue is triggered by manipulating arguments including fullname, address, phonenumber, sex, email, city, and comment, which can be exploited remotely. Several...

9.8CVSS7.1AI score0.00612EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/06/27 12:00 a.m.•17 views

Tailoring Management System SQL Injection Vulnerability

Tailoring Management System is an itsourcecode open source tailoring management system. A SQL injection vulnerability exists in Tailoring Management System version 1.0, which originates from a SQL injection vulnerability in the customeradd.php page...

9.8CVSS8AI score0.00612EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/27 12:00 a.m.•3 views

CVE-2024-6372: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file customeradd.php. The manipulation of the argument fullname/address/phonenumber/sex/email/city/comment leads to sql injection. It is possible to...

9.8CVSS6.4AI score0.00612EPSS
SaveExploits1References1
Rows per page
Query Builder