Lucene search
+L

1302 matches found

CNVD
CNVD
•added 2022/06/17 12:00 a.m.•58 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68957)

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, a personal developer, has a SQL injection vulnerability in version v1.0, which originates in /school/model/ getevents.php?eventid=The page lacks validation for external input SQL statements, which could be...

6.5CVSS4.4AI score0.00956EPSS
SaveExploits1Affected Software1
CNNVD
CNNVD
•added 2022/06/17 12:00 a.m.•20 views

Online Ordering System SQL Injection Vulnerability

Online Ordering System is a multi-store ordering system that can be used by any small business.Online Ordering System version v2.3.2 is vulnerable to SQL injection, which originates from /ordering/index.php?q=category&search=Lack of validation of external input SQL statement validation, an attack...

9.8CVSS6AI score0.01079EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/06/15 4:15 p.m.•15 views

CVE-2021-41672

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious SQL query in order to affect the execution logic of the application and retrive information from the database...

6.5CVSS5.9AI score0.01419EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/15 4:15 p.m.•11 views

CVE-2021-41672

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious SQL query in order to affect the execution logic of the application and retrive information from the database...

6.5CVSS6.8AI score0.01419EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•77 views

Amodat Mobile Application Gateway SQL Injection Vulnerability

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...

7.2CVSS3.7AI score0.0045EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•35 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77048)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=products/manageproduct& id= page has SQL injection problem, attackers can use the...

7.2CVSS5.4AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•69 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77049)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/managefield.php?id=page. SQL injection problem, an attacker can use this...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/15 12:00 a.m.•19 views

Advanced School Management System SQL Injection Vulnerability

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getsubjectrouting.php?id=The page lacks validation for external input SQL statements...

7.2CVSS5.9AI score0.00956EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•54 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77050)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/06/14 3:15 a.m.•24 views

CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

7.5CVSS5.8AI score0.01232EPSS
SaveExploits1References2
CNVD
CNVD
•added 2022/06/13 12:00 a.m.•33 views

Prison Management System SQL Injection Vulnerability (CNVD-2022-48406)

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

7.2CVSS6AI score0.00713EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•68 views

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54286)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule, a personal developer. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from the admin/featureedit.php page that lacks An attacker can use this vulnerability to execute...

7.2CVSS3.3AI score0.01024EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•59 views

Online Car Wash Booking System SQL注入漏洞(CNVD-2022-53345)

Online Car Wash Booking System is an online car wash booking system from Carlo Montero's personal developer. version v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=bookings /viewdetails&id=page lacks validation of external input SQL...

9.8CVSS4.7AI score0.0114EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•88 views

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55745)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteinquiry lacks validation for external input SQL statements,...

9.8CVSS4.8AI score0.07043EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•48 views

Wedding Management System SQL Injection Vulnerability (CNVD-2022-54296)

Wedding Management System is a wedding planning management system by John Paul Lim Gabule. v1.0 of Wedding Management System is vulnerable to SQL injection, which originates from Wedding-Management/wedding details.php page. details.php page lacks validation of externally entered SQL statements,...

7.2CVSS2.9AI score0.01024EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•58 views

Online Car Wash Booking System SQL注入漏洞(CNVD-2022-53347)

Online Car Wash Booking System is an online car wash booking system by Carlo Montero, a personal developer. Online Car Wash Booking System v1.0 is vulnerable to SQL injection, which originates from /ocwbs/admin/services/ manageprice.php?id=The page lacks validation for external input SQL...

9.8CVSS2.9AI score0.01155EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•70 views

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55723)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/stockin/index.php?view=edit&id= The page lacks validation of externally entered SQL...

9.8CVSS4.4AI score0.0114EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•34 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44732)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. Badminton Center Management System version v1.0 is vulnerable to S...

7.2CVSS3.9AI score0.00871EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•33 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44727)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

7.2CVSS4.2AI score0.01024EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/09 12:00 a.m.•32 views

Badminton Center Management System SQL注入漏洞(CNVD-2022-44735)

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. version v1.0 of Badminton Center Management System is vulnerable t...

9.8CVSS3.7AI score0.01141EPSS
SaveExploits1References1
Rows per page
Query Builder