Lucene search
+L

1681 matches found

OSV
OSV
•added 2022/01/21 4:15 p.m.•12 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

9.8CVSS5.8AI score0.01751EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/21 4:15 p.m.•16 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS8.1AI score0.01751EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/21 4:15 p.m.•25 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS0.01751EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/21 4:15 p.m.•29 views

Sql injection

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS9.8AI score0.01751EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/01/21 3:20 p.m.•37 views

CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10AI score0.01751EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•14 views

SourceCodester Courier Management System SQL注入漏洞

SourceCodester Courier Management System is an application program of SourceCodester. It is a system that provides management functions. A SQL injection vulnerability exists in the SourceCodester Courier Management System, which stems from the email parameter in the product/cms/ajax.php page...

10CVSS8.6AI score0.01751EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•2 views

CVE-2021-46198: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app...

10CVSS5.8AI score0.01751EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/21 12:00 a.m.•21 views

PT-2022-12606 · Unknown · Sourcecodester Simple Music Cloud Community System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Simple Music Clour Community System version 1.0 Description: An SQL Injection issue exists via the email parameter in the "/music/ajax.php" API endpoint. This allows for potential exploitation. Recommendations: For Sourcecodest...

10CVSS9.9AI score0.01556EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•12 views

Sourcecodester Simple Music Clour Community System SQL注入漏洞

Sourcecodester Simple Music Clour Community System is a simple music cloud community system. sourcecodester Simple Music Clour Community System has a SQL injection vulnerability in version v1.0, which originates from the product / music/ajax.php page fails to properly filter the email parameter f...

10CVSS6AI score0.01556EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•1 views

CVE-2021-46200: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php...

10CVSS5.8AI score0.01556EPSS
SaveExploits1References2
OSV
OSV
•added 2021/12/27 11:15 a.m.•9 views

CVE-2021-24980

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwollegbuseremail parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin page...

6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
CNVD
CNVD
•added 2021/12/24 12:00 a.m.•51 views

Projectworlds Hospital Management System SQL Injection Vulnerability

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

9.8CVSS4AI score0.0113EPSS
SaveExploits1References1
OSV
OSV
•added 2021/12/23 8:15 p.m.•6 views

CVE-2021-43981

mySCADA myPRO: Versions 8.20.0 and prior has a feature to send emails, which may allow an attacker to inject arbitrary operating system commands through a specific parameter...

9.8CVSS5.9AI score0.01218EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/12/22 6:15 p.m.•6 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS7.3AI score0.0113EPSS
SaveExploits1References3
OSV
OSV
•added 2021/12/22 6:15 p.m.•15 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/12/22 5:17 p.m.•31 views

CVE-2021-43628

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

10AI score0.0113EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2021/12/22 12:00 a.m.•12 views

Projectworlds Hospital Management System SQL注入漏洞

Projectworlds Hospital Management System is a hospital management system from Projectworlds Austria. SQL injection vulnerability exists in Projectworlds Hospital Management System version 1.0, which can be exploited by attackers via the "hms -staff.php" in "email parameter" to perform SQL...

9.8CVSS5.9AI score0.0113EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/22 12:00 a.m.•2 views

CVE-2021-43628: Improper Neutralization of Special Elements used in an SQL Command

Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the email parameter in hms-staff.php...

9.8CVSS5.8AI score0.0113EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2021/12/21 12:15 p.m.•12 views

CVE-2021-45255

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with that domain,...

10CVSS7.3AI score0.01537EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/21 12:15 p.m.•39 views

CVE-2021-45255

The email parameter from ajax.php of Video Sharing Website 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted with that domain,...

10CVSS0.01537EPSS
SaveExploits1References1
Rows per page
Query Builder