CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

CVE-2024-11487 Code4Berry Decoration Management System Between Dates Reports btndates_report.php sql injection

A vulnerability has been found in Code4Berry Decoration Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /decoration/admin/btndatesreport.php of the component Between Dates Reports. The manipulation of the argument fromdate/todate leads to sql...

CVE-2024-11487

CVE-2024-11487 affects Code4Berry Decoration Management System 1.0, specifically the file /decoration/admin/btndates_report.php within the Between Dates Reports component. The vulnerability arises from improper handling of the fromdate/todate parameters, enabling SQL injection. Exploitation can b...

CVE-2024-40590

creationtimestamp| type| source ---|---|--- 2024-11-13 14:12:43+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113476053415922211 2025-03-14 16:42:25+00:00| seen| https://t.me/cvedetector/20295 2025-03-14 16:46:11+00:00| seen|...

CVE-2024-10174

creationtimestamp| type| source ---|---|--- 2024-11-13 05:48:04+00:00| seen| https://t.me/cvedetector/10796 2025-02-06 02:44:19+00:00| seen| Telegram/jG0qnbvX7fTNybHA2Dm9xh0V2CY1RIXz7iuktVVzWNHDLRcS...

CVE-2024-11117

creationtimestamp| type| source ---|---|--- 2024-11-12 19:06:20+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471545629765640 2024-11-12 23:06:05+00:00| seen| https://t.me/cvedetector/10747 2024-11-13 18:45:06+00:00| seen|...

CVE-2017-15363

creationtimestamp| type| source ---|---|--- 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-12-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-15 2024-12-16 00:00:00+00:00| seen| The Shadowserver...

CVE-2016-5700

creationtimestamp| type| source ---|---|--- 2024-11-09 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-09 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-11-14 00:00:00+00:00| seen| The Shadowserver...

CVE-2024-50130

creationtimestamp| type| source ---|---|--- 2024-11-05 19:44:36+00:00| seen| https://t.me/cvedetector/9931 2025-03-08 04:34:10+00:00| seen| Telegram/z9UMiF2wbzIvuPNfjokOH3MfMP4l-JzMiQXGUG-ema-mlExO...

CVE-2024-51378

creationtimestamp| type| source ---|---|--- 2024-10-30 00:49:07+00:00| exploited| https://t.me/cvedetector/9380 2024-10-30 02:57:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8886 2024-11-01 15:52:35+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/6249...

CVE-2020-26306 GHSL-2020-296: Regular Expression Denial of Service (ReDoS) in Knwl.js

Knwl.js is a Javascript library that parses through text for dates, times, phone numbers, emails, places, and more. Versions 1.0.2 and prior contain one or more regular expressions that are vulnerable to Regular Expression Denial of Service ReDoS. As of time of publication, no known patches are...

PT-2024-10796 · Knwl.Js · Knwl.Js

Name of the Vulnerable Software and Affected Versions: Knwl.js versions 1.0.2 and prior Description: The issue concerns a Regular Expression Denial of Service ReDoS in the Knwl.js library, which is used for parsing text to extract information such as dates, times, phone numbers, and more. No...

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

Client Management System SQL注入漏洞

Client Management System is a system for managing customer relationships by an individual Indian developer Haneen Gufran. A security vulnerability exists in Client Management System version 1.0 that originates from SQL injection in the Between Dates Reports parameter of the...

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

CVE-2024-48570

CVE-2024-48570 affects Client Management System 1.0. A SQL injection vulnerability exists in the Between Dates Reports parameter of the /admin/bwdates-reports-ds.php endpoint. The CVSS 3.1 base score is 7.5 (High) with Confidentiality impact High; no integrity/availability impact described. Conne...

PT-2024-33150 · Unknown · Client Management System

Name of the Vulnerable Software and Affected Versions: Client Management System version 1.0 Description: A SQL injection issue was discovered in the Client Management System via the Between Dates Reports parameter at the "/admin/bwdates-reports-ds.php" API endpoint. Recommendations: For Client...

CVE-2024-48570

Client Management System 1.0 was discovered to contain a SQL injection vulnerability via the Between Dates Reports parameter at /admin/bwdates-reports-ds.php...

CVE-2024-10160

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...