Lucene search
+L

1740 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/21 12:00 a.m.•2 views

CVE-2022-45677: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection Vulnerability in tanujpatra228 Tution Management System TMS via the email parameter to processes/studentlogin.process.php...

9.8CVSS5.8AI score0.0086EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/18 2:15 a.m.•16 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.4CVSS6AI score0.00806EPSS
SaveExploits1References3
Prion
Prion
•added 2023/02/18 2:15 a.m.•25 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

4.9CVSS5.5AI score0.00806EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/02/18 12:00 a.m.•68 views

CVE-2022-40348

CVE-2022-40348 affects Intern Record System v1.0, vulnerable in /intern/controller.php where the name and email fields are unsafely handled, allowing stored/reflected XSS to trigger arbitrary script execution in the context of the affected site. Public references (NVD/Red Hat/CVE listings) descri...

5.4CVSS5.5AI score0.00806EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/02/18 12:00 a.m.•48 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.7AI score0.00806EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•2 views

CVE-2022-40348: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.4CVSS6.5AI score0.00806EPSS
SaveExploits1References3
OSV
OSV
•added 2023/02/17 1:15 p.m.•17 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS6.1AI score0.05348EPSS
SaveExploits5References4
Cvelist
Cvelist
•added 2023/02/17 12:00 a.m.•61 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

10AI score0.05348EPSS
SaveExploits5References4
GithubExploit
GithubExploit
•added 2023/02/16 2:29 a.m.•17 views

Exploit for Cross-site Scripting in Intern_Record_System_Project Intern_Record_System

CVE-2022-40348: Intern Record System - 'name' and 'email' Cros...

5.4CVSS6.6AI score0.00806EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2023/02/16 2:16 a.m.•13 views

Exploit for SQL Injection in Intern_Record_System_Project Intern_Record_System

CVE-2022-40347: Intern Record System - 'phone', 'email', 'dept...

9.8CVSS10AI score0.05348EPSS
SaveExploits5
OSV
OSV
•added 2023/02/13 9:15 p.m.•10 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.2AI score0.00736EPSS
SaveExploits1References1
NVD
NVD
•added 2023/02/13 9:15 p.m.•27 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits1References1
Prion
Prion
•added 2023/02/13 9:15 p.m.•31 views

Sql injection

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

5CVSS7.8AI score0.00736EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/02/13 12:00 a.m.•99 views

CVE-2023-24647

Summary of CVE-2023-24647 (Food Ordering System v2.0) : A SQL injection vulnerability exists in the email parameter of Food Ordering System v2.0. The issue enables unauthorized disclosure of data, with a CVSS v3.1 base score of 7.5 (Impact: Confidentiality High; Integrity/Availability: None). Con...

7.5CVSS7.8AI score0.00736EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/13 12:00 a.m.•1 views

CVE-2023-24647: Improper Neutralization of Special Elements used in an SQL Command

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.5CVSS5.8AI score0.00736EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/13 12:00 a.m.•12 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

7.8AI score0.00736EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/02/13 12:00 a.m.•38 views

CVE-2023-24647

Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter...

8AI score0.00736EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/02/10 12:00 a.m.•35 views

CVE-2023-24350

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the config.smtpemailsubject parameter at /goform/formSetEmail...

9.9AI score0.01191EPSS
SaveExploits1References2
NVD
NVD
•added 2023/02/03 5:15 p.m.•29 views

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

6.1CVSS5.9AI score0.00423EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/02/03 5:15 p.m.•9 views

CVE-2023-22975

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

6.1CVSS6.5AI score0.00423EPSS
SaveExploits1References2
Rows per page
Query Builder