Lucene search
+L

1681 matches found

Positive Technologies
Positive Technologies
•added 2022/02/18 12:00 a.m.•15 views

PT-2022-12571 · Unknown · Online Shopping Portal

Name of the Vulnerable Software and Affected Versions: Online Shopping Portal version 3.1 Description: The issue concerns multiple time-based SQL injection vulnerabilities. These vulnerabilities can be exploited via the email and contactno parameters. Recommendations: For Online Shopping Portal...

9.8CVSS10AI score0.01141EPSS
SaveExploits1References5
NVD
NVD
•added 2022/01/31 10:15 p.m.•41 views

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

9.8CVSS0.08244EPSS
SaveExploits4References5
OSV
OSV
•added 2022/01/31 10:15 p.m.•11 views

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

9.8CVSS7.2AI score0.08244EPSS
SaveExploits4References5
attackerkb
attackerkb
•added 2022/01/31 10:15 p.m.•12 views

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

9.8CVSS7.2AI score0.08244EPSS
SaveExploits4References6
Prion
Prion
•added 2022/01/31 10:15 p.m.•23 views

Sql injection

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

7.5CVSS9.7AI score0.08244EPSS
SaveExploits4References5Affected Software1
CVE
CVE
•added 2022/01/31 9:27 p.m.•112 views

CVE-2022-24263

CVE-2022-24263 affects Hospital Management System v4.0 with confirmed SQL injection endpoints in Hospital-Management-System-master/func.php (via email) and related entries in contact.php (via txtMsg) and func3.php. The Exploit-DB record details multiple injections and payloads, implying attacker ...

9.8CVSS9.7AI score0.08244EPSS
SaveExploits4References5Affected Software1
Cvelist
Cvelist
•added 2022/01/31 9:27 p.m.•62 views

CVE-2022-24263

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

10AI score0.08244EPSS
SaveExploits4References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/31 12:00 a.m.•1 views

CVE-2022-24263: Improper Neutralization of Special Elements used in an SQL Command

Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter...

9.8CVSS7.5AI score0.08244EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2022/01/31 12:00 a.m.•6 views

PT-2022-16573 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 4.0 Description: The issue is related to a SQL injection vulnerability. It affects the /Hospital-Management-System-master/func.php endpoint via the email parameter. Recommendations: For Hospital Management...

9.8CVSS8.7AI score0.08244EPSS
SaveExploits4References8
Positive Technologies
Positive Technologies
•added 2022/01/28 12:00 a.m.•20 views

PT-2022-8722 · Sourcecodester · Sourcecodester Mobile Shop System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Mobile Shop System in PHP MySQL version 1.0 Description: An SQL Injection issue exists in the system via the email parameter in the "login.php" or "LoginAsAdmin.php" files. This allows for potential exploitation. Recommendation...

9.8CVSS9.9AI score0.01666EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/01/28 12:00 a.m.•15 views

Sourcecodester Mobile Shop System in PHP MySQL SQL注入漏洞

Sourcecodester Mobile Shop System in PHP MySQL is an online ordering system for Gadget Works developed using PHP/MySQLi. The main goal of this online ordering system is to improve customer convenience. sourcecodester Mobile Shop System in PHP MySQL 1.0 is vulnerable due to a security flaw in the...

9.8CVSS5.6AI score0.01666EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/28 12:00 a.m.•4 views

CVE-2020-25905: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabilty exists in Sourcecodester Mobile Shop System in PHP MySQL 1.0 via the email parameter in 1 login.php or 2 LoginAsAdmin.php...

9.8CVSS8.2AI score0.01666EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/25 1:15 p.m.•14 views

CVE-2021-45802

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration...

9.8CVSS5.8AI score0.01313EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/25 1:15 p.m.•6 views

CVE-2021-45802

MartDevelopers iResturant 1.0 is vulnerable to SQL Injection. SQL Injection occurs because the email and phone parameter values are added to the SQL query without any verification at the time of membership registration...

9.8CVSS6AI score0.01313EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/01/25 12:00 a.m.•12 views

MartDevelopers Iresturant SQL注入漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya. used to integrate social restaurant operations into one system. martDevelopers iResturant 1.0 is vulnerable to a SQL injection vulnerability that stems from adding email and phone parameter values ar...

9.8CVSS6.1AI score0.01313EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/01/24 4:15 p.m.•12 views

CVE-2021-40909

Cross site scripting XSS vulnerability in sourcecodester PHP CRUD without Refresh/Reload using Ajax and DataTables Tutorial v1 by oretnom23, allows remote attackers to execute arbitrary code via the firstname, lastname, and email parameters to /ajaxcrud...

9.6CVSS7.6AI score0.02181EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/24 4:15 p.m.•12 views

CVE-2021-41471

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS6.1AI score0.01228EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•3 views

CVE-2021-41471: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the email and Password parameters...

9.8CVSS6.3AI score0.01228EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/24 12:00 a.m.•12 views

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System, which originated in Sourcecodester South Gate Inn Online Reservation System v1 by oretnom23, and can be...

9.8CVSS8.8AI score0.01228EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/21 4:15 p.m.•11 views

CVE-2021-46200

An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php...

10CVSS8.1AI score0.01556EPSS
SaveExploits1References2
Rows per page
Query Builder