Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:15 a.m.1 views

CVE-2024-30989

Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...

5.4CVSS7.1AI score0.00224EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:14 a.m.1 views

CVE-2024-9328

A vulnerability was found in SourceCodester Advocate Office Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /control/editclient.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7.4AI score0.00077EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:19 p.m.2 views

CVE-2022-38610

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.1 views

Farmacia 注入漏洞

Farmacia is a content management system from code-projects. An injection vulnerability exists in code-projects Farmacia version 1.0, which stems from an SQL injection vulnerability contained in the id parameter of the /editar-cliente.php file...

9.8CVSS7AI score0.0014EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/09/29 12:0 a.m.1 views

PT-2024-39577 · Sourcecodester · Sourcecodester Advocate Office Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Advocate Office Management System version 1.0 Description: A critical issue affects the processing of the file /control/edit client.php, where the manipulation of the id argument leads to SQL injection. The attack can be...

9.8CVSS7.1AI score0.00077EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/09/29 12:0 a.m.1 views

Advocate Office Management System SQL注入漏洞

Advocate Office Management System is an office management system by Mayuri K. Individual Developer. A SQL injection vulnerability exists in Advocate Office Management System version 1.0, which originates from an SQL injection vulnerability in the id parameter of the /control/editclient.php page...

9.8CVSS7AI score0.00077EPSS
Exploits1References6
OSV
OSV
added 2024/08/27 6:15 p.m.0 views

CVE-2024-8208

A vulnerability has been found in nafisulbari/itsourcecode Insurance Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file editClient.php. The manipulation of the argument AGENT ID leads to cross site scripting. The attack can ...

6.1CVSS3.8AI score
Exploits0References3
OSV
OSV
added 2024/06/03 2:15 p.m.0 views

CVE-2024-36569

Sourcecodester Gas Agency Management System v1.0 is vulnerable to arbitrary code execution via editClientImage.php...

8.1CVSS6.3AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/06/03 12:0 a.m.1 views

PT-2024-27071 · Sourcecodester · Sourcecodester Garage Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Gas Agency Management System version 1.0 Description: The issue allows for arbitrary code execution via the editClientImage.php file. This could potentially lead to unauthorized access and control of the system. Recommendations...

8.1CVSS7.8AI score0.00189EPSS
Exploits1References5
OSV
OSV
added 2024/04/17 7:15 p.m.0 views

CVE-2024-30989

Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter...

5.4CVSS6.1AI score0.00224EPSS
Exploits1References1
CVE
CVE
added 2024/04/17 12:0 a.m.53 views

CVE-2024-30989

CVE-2024-30989 affects the phpgurukul Client Management System (PHP & MySQL 1.1). A cross-site scripting vulnerability exists in /edit-client-details.php that allows attackers to execute arbitrary code through the cname, comname, state, and city parameters. The connected documents do not specify ...

5.4CVSS7.3AI score0.00224EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2023/02/11 1:23 a.m.1 views

CVE-2022-46678

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized...

4.9CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2023/02/11 1:23 a.m.0 views

CVE-2022-46755

Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit general client policy for which the user is not authorized...

4.9CVSS5.8AI score
Exploits0References1
CNVD
CNVD
added 2022/10/10 12:0 a.m.16 views

Online Diagnostic Lab Management System SQL Injection Vulnerability (CNVD-2022-68287)

Online Diagnostic Lab Management System is an online diagnostic lab management system. SQL injection vulnerability exists in Online Diagnostic Lab Management System v1.0, which originates from the /diagnostic/editclient.php The id parameter in /diagnostic/editclient.php is vulnerable to SQL...

7.2CVSS2.7AI score0.00274EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/10/07 7:15 p.m.1 views

CVE-2022-42073

Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=...

7.2CVSS5.9AI score0.00274EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.2 views

PT-2022-26235 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the "/diagnostic/editclient.php?id=" API endpoint. This allows for potential manipulation of database queries by...

7.2CVSS7.1AI score0.00274EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/12 9:15 p.m.2 views

CVE-2022-38610

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

7.2CVSS5.8AI score0.00274EPSS
Exploits1References2
OSV
OSV
added 2022/09/12 9:15 p.m.0 views

CVE-2022-38610

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php...

7.2CVSS5.8AI score0.00274EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/09/12 12:0 a.m.3 views

Church Management System SQL注入漏洞

Church Management System is a church management system. A security vulnerability exists in Church Management System v1.0, which originates from a SQL injection vulnerability in the id parameter via /garage/editclient.php...

7.2CVSS7.3AI score0.00274EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/05/12 4:15 p.m.0 views

CVE-2022-29999

Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=...

9.8CVSS7.3AI score0.00264EPSS
Exploits1References2
Rows per page
Query Builder