Lucene search
+L

7 matches found

EUVD
EUVD
•added 2025/11/03 3:02 a.m.•17 views

EUVD-2025-37469

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function deletepayment of the file /adminclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

5.8CVSS6.5AI score0.00408EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
•added 2025/11/03 3:02 a.m.•7 views

CVE-2025-12614 SourceCodester Best House Rental Management System admin_class.php delete_payment sql injection

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function deletepayment of the file /adminclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

5.8CVSS6.7AI score0.00408EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•3 views

CVE-2025-12614: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function deletepayment of the file /adminclass.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made...

9.8CVSS5.6AI score0.00408EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•2 views

CVE-2025-10109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/06 12:00 a.m.•1 views

CVE-2024-1175: Missing Authorization

The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deletepayment' function in all versions up to, and including, 16.26.6. This makes it possible for unauthenticated attackers to delete...

5.3CVSS5.8AI score0.00393EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/26 1:15 p.m.•8 views

CVE-2022-36683

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletepayment...

9.8CVSS7.4AI score0.01033EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/26 12:00 a.m.•17 views

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in classes/Master.php?f=deletepayment...

9.8CVSS7.8AI score0.01033EPSS
SaveExploits1References2
Rows per page
Query Builder