Lucene search
+L

11995 matches found

OSV
OSV
added 2024/04/03 2:15 a.m.13 views

CVE-2024-3225

A vulnerability was found in SourceCodester PHP Task Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file edit-task.php. The manipulation of the argument taskid leads to sql injection. The attack may be launched remotely. The exploit h...

6.5CVSS5.8AI score0.0057EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.12 views

PT-2024-24680 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting an unknown functionality of the file admin/edit activity.php. The...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.10 views

Internship Portal Management System 安全漏洞

Internship Portal Management System is an internship portal management system by ChatikoboL individual developer. A security vulnerability exists in version 1.0 of the Internship Portal Management System due to an SQL injection vulnerability in the adminid parameter of the admin/editadmin.php fil...

7.2CVSS6.9AI score0.00706EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/04/03 12:00 a.m.16 views

SourceCodester Task Management System SQL注入漏洞

SourceCodester Task Management System is a task management system. A SQL injection vulnerability exists in SourceCodester Task Management System version 1.0, which originates from a SQL injection vulnerability in the taskid parameter of the file edit-task.php...

6.5CVSS7AI score0.0057EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.15 views

PT-2024-24659 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue has been found in the SourceCodester Internship Portal Management System, affecting the processing of the file admin/edit admin.php. The manipulation...

7.2CVSS7.2AI score0.00706EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/04/03 12:00 a.m.13 views

PT-2024-24691 · Unknown · Sourcecodester Internship Portal Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Internship Portal Management System version 1.0 Description: A critical issue was found in the SourceCodester Internship Portal Management System, affecting some unknown functionality of the file admin/edit activity query.php...

7.2CVSS7.1AI score0.00706EPSS
SaveExploits1References7
Exploit DB
Exploit DB
added 2024/04/02 12:00 a.m.459 views

Employee Management System 1.0 - _txtfullname_ and _txtphone_ SQL Injection

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

8.4AI score
SaveExploits3
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.13 views

PT-2024-24471 · Sourcecodester · Sourcecodester Php Task Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester PHP Task Management System version 1.0 Description: A critical issue was found in the SourceCodester PHP Task Management System, affecting some unknown functionality of the file edit-task.php. The manipulation of the task id...

6.5CVSS8.2AI score0.0057EPSS
SaveExploits1References8
zdt
zdt
added 2024/04/02 12:00 a.m.238 views

Employee Management System 1.0 - (txtfullname) and (txtphone) SQL Injection Vulnerability

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on: Debian CVE :...

7.1AI score
SaveExploits3
Packet Storm
Packet Storm
added 2024/04/02 12:00 a.m.556 views

Employee Management System 1.0 SQL Injection

Exploit Title: Employee Management System 1.0 - txtfullname and txtphone SQL Injection Date: 2 Feb 2024 Exploit Author: Yevhenii Butenko Vendor Homepage: https://www.sourcecodester.com Software Link: https://www.sourcecodester.com/php/16999/employee-management-system.html Version: 1.0 Tested on:...

7AI score
SaveExploits5
Positive Technologies
Positive Technologies
added 2024/04/02 12:00 a.m.19 views

PT-2024-18363 · WordPress · Wp-Members Membership Plugin

Name of the Vulnerable Software and Affected Versions: WP-Members Membership Plugin versions prior to 3.4.9.3 Description: The WP-Members Membership Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the X-Forwarded-For header due to insufficient input sanitization and output...

7.2CVSS8.3AI score0.00675EPSS
SaveExploits0References9
OSV
OSV
added 2024/04/01 4:15 p.m.10 views

CVE-2024-30858

netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/editfirewall.php...

9.8CVSS5.8AI score0.00734EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/01 12:00 a.m.10 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editfirewall.php file...

9.8CVSS7.9AI score0.00734EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/04/01 12:00 a.m.10 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/edituserlogin.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2024/04/01 12:00 a.m.20 views

FreeBSD : mediawiki -- multiple vulnerabilities (d58726ff-ef5e-11ee-8d8e-080027a5b8e9)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d58726ff-ef5e-11ee-8d8e-080027a5b8e9 advisory. - Mediawiki reports: T355538, CVE-2024-PENDING SECURITY: XSS in edit summary parser. T357760,...

5.5AI score
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/01 12:00 a.m.12 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/editvirtualsiteinfo.php file...

9.8CVSS7.9AI score0.00696EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/26 4:15 p.m.17 views

CVE-2024-29810

The thumburl parameter of the AJAX call to the editimagebwg action of admin-ajax.php is vulnerable to reflected Cross Site Scripting. The value of the thumburl parameter is embedded within an existing JavaScript within the response allowing arbitrary JavaScript to be inserted and executed. The...

5.4CVSS5.8AI score0.00415EPSS
SaveExploits1References2
CNVD
CNVD
added 2024/03/26 12:00 a.m.15 views

Complete Online Beauty Parlor Management System /edit-services.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the editid parameter of th...

6.5CVSS6.1AI score0.00496EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/03/26 12:00 a.m.12 views

WordPress Plugin Testimonial Slider 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

4.3CVSS8.3AI score0.00381EPSS
SaveExploits2References2
OSV
OSV
added 2024/03/25 5:15 a.m.12 views

CVE-2024-1962

The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack...

8.8CVSS5.8AI score0.0047EPSS
SaveExploits2References1
Rows per page
Query Builder