Lucene search
+L

1740 matches found

CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•18 views

WordPress plugin Yotpo: Product & Photo Reviews for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS7.7AI score0.00455EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/15 12:00 a.m.•10 views

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Beauty Parlour Management System, which stems from the parameter email in the file /admin/forgot-password.php that...

9.8CVSS7.9AI score0.00746EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/12 2:15 a.m.•20 views

CVE-2024-11099

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00604EPSS
SaveExploits1References5
OSV
OSV
•added 2024/11/11 7:15 p.m.•9 views

CVE-2024-11077

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

9.8CVSS5.7AI score0.00652EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/11 12:00 a.m.•9 views

Job Recruitment 安全漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from a SQL injection vulnerability in the email parameter of the /index.php page...

9.8CVSS7.8AI score0.00652EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/11 12:00 a.m.•12 views

PT-2024-16740 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code-projects Job Recruitment software. The issue affects an unknown function of the file /index.php. The manipulation of the email argument lead...

9.8CVSS8.4AI score0.00652EPSS
SaveExploits1References17
CNVD
CNVD
•added 2024/11/11 12:00 a.m.•14 views

Teachers Record Management System add-teacher.php File SQL Injection Vulnerability

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

9.1CVSS8AI score0.005EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/07 12:00 a.m.•13 views

PT-2024-16680 · Code Projects · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was found in the file /Doctor/doctor login.php, where the manipulation of the email argument leads to SQL injection. The attack can be launched remotely. Other...

9.1CVSS7.7AI score0.00633EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
•added 2024/11/03 12:00 a.m.•16 views

PT-2024-16499 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue affects the processing of the file /student.php, where the manipulation of the email argument leads to SQL injection. The attack can be initiated...

9.8CVSS8.1AI score0.00604EPSS
SaveExploits1References10
CNNVD
CNNVD
•added 2024/11/03 12:00 a.m.•12 views

Codezips Free Exam Hall Seating Management System SQL注入漏洞

Codezips Free Exam Hall Seating Management System is a free exam hall seating management system from Codezips open source. A SQL injection vulnerability exists in Codezips Free Exam Hall Seating Management System version 1.0, which stems from an incorrect manipulation of the parameter email that...

9.8CVSS7.9AI score0.00646EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/11/02 12:00 a.m.•16 views

PT-2024-16500 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /teacher.php. The manipulation of the email argument leads to SQL...

9.8CVSS8.1AI score0.00646EPSS
SaveExploits1References11
OSV
OSV
•added 2024/10/31 7:15 p.m.•14 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

9.1CVSS5.8AI score0.005EPSS
SaveExploits1References2
NVD
NVD
•added 2024/10/31 7:15 p.m.•41 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

9.1CVSS0.005EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/10/31 12:00 a.m.•39 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

0.005EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/10/31 12:00 a.m.•16 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

8.1AI score0.005EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/10/31 12:00 a.m.•11 views

PHPGurukul Teachers Record Management System 安全漏洞

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

9.1CVSS7.9AI score0.005EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/31 12:00 a.m.•75 views

CVE-2024-51063

The Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection within the add-teacher.php file. The vulnerability can be triggered through the mobile number or email parameters. While the specific technical root cause is not detailed beyond the injection point, the impact is...

9.1CVSS8.3AI score0.005EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/10/30 12:00 a.m.•24 views

PT-2024-16329 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /login.php. The manipulation of the email argument leads to sql injection. The attack can...

9.8CVSS7.8AI score0.00797EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
•added 2024/10/30 12:00 a.m.•14 views

PT-2024-16327 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue was found in the system, affecting the /login.php file. The manipulation of the email argument leads to SQL injection. The attack can be initiated...

9.8CVSS8AI score0.00797EPSS
SaveExploits1References8
attackerkb
attackerkb
•added 2024/10/25 5:15 p.m.•11 views

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00303EPSS
SaveExploits1References2
Rows per page
Query Builder