Lucene search
+L

6525 matches found

CNNVD
CNNVD
added 2025/06/20 12:00 a.m.8 views

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...

9.8CVSS8.1AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

Code-Projects Simple Pizza Ordering System 安全漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /editpro.php. An attacker can exploit this vulnerabilit...

9.8CVSS8.2AI score0.00415EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.9 views

code-projects Hostel Management System 注入漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter studentrollno in the file /contactmanager.php. An attacker can use this...

9.8CVSS8.2AI score0.00432EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

code-projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter productcode in the file /admin/adminfeature.php. An attacker can exploit this...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.11 views

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fathername in the file /enrollment.php. An attacke...

9.8CVSS8.1AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.6 views

PHPGurukul Directory Management System 安全漏洞

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /admin/search-directory.php. An attacker can...

8.8CVSS8.2AI score0.00338EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.9 views

Code-Projects Simple Pizza Ordering System 安全漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter userid in file /adds.php. An attacker can exploit this vulnerabili...

9.8CVSS8.2AI score0.00415EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.10 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.1AI score0.00415EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00438EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/06/20 12:00 a.m.14 views

PT-2025-26386 · Unknown · Sparkle Themes Fitness Park

Name of the Vulnerable Software and Affected Versions: Sparkle Themes Fitness Park versions n/a through 1.1.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows DOM-Based XSS. This means that an attack...

6.5CVSS5.8AI score0.00209EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.8 views

Code-Projects Hostel Management System 注入漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter hostelname in the file /contact.php. An attacker can use this vulnerability to...

9.8CVSS8.2AI score0.00432EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

code-projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Message in the file /contactus1.php. The vulnerability can be exploited by an attacker t...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.9 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter person in the file /paymentportal.php. The vulnerability can be...

9.8CVSS8.1AI score0.00415EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.5 views

code-projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter qty in the file /cart.php. The vulnerability can be exploited to execute illegal SQL...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.7 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ID of file /admin/confirm.php. The vulnerability can be exploited by an attacker to...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.4 views

Code-Projects Online Shoe Store 注入漏洞

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter email in the file /function/customersignup.php. An attacker can exploit this vulnerability...

9.8CVSS8.1AI score0.00438EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.9 views

Code-Projects Hostel Management System 注入漏洞

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchbox in the file /allocatedrooms.php. An attacker can use this vulnerabilit...

9.8CVSS8.2AI score0.00432EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.11 views

Code-Projects Simple Pizza Ordering System 注入漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /saveorder.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00415EPSS
SaveExploits1References5
The Hacker News
The Hacker News
added 2025/06/19 5:23 p.m.22 views

New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud, and NFC Theft

Cybersecurity researchers have exposed the inner workings of an Android malware called AntiDot that has compromised over 3,775 devices as part of 273 unique campaigns. "Operated by the financially motivated threat actor LARVA-398, AntiDot is actively sold as a Malware-as-a-Service MaaS on...

7.7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/06/19 9:00 a.m.11 views

CVE-2025-40674

Reflected Cross-Site Scripting XSS in osCommerce v4. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the name of any parameter in /watch/en/about-us. This vulnerability can be exploited to steal sensitive user...

5.1CVSS5.7AI score0.00421EPSS
SaveExploits0References1
Rows per page
Query Builder