Lucene search
+L

11662 matches found

CNNVD
CNNVD
added 2024/11/08 12:00 a.m.6 views

Codezips Online Institute Management System 安全漏洞

Codezips Online Institute Management System is an open source online institute management system from Codezips. A security vulnerability exists in Codezips Online Institute Management System version 1.0, which stems from the parameter image in the file /edituser.php that can lead to unrestricted...

8.8CVSS6.5AI score0.00681EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/11/08 12:00 a.m.8 views

Codezips Hospital Appointment System 注入漏洞

Codezips Hospital Appointment System is an open source hospital appointment system from Codezips. An injection vulnerability exists in Codezips Hospital Appointment System version 1.0, which stems from the parameter ID of the file /editBranchResult.php that can cause SQL injection...

9.8CVSS8AI score0.00698EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/11/08 12:00 a.m.9 views

1000 Projects Bookstore Management System 注入漏洞

1000 Projects Bookstore Management System is an open source bookstore management system from 1000 Projects. An injection vulnerability exists in 1000 Projects Bookstore Management System version 1.0, which stems from the parameter cat in the file /admin/processcategoryedit.php that can cause SQL...

9.8CVSS8AI score0.00698EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/05 3:15 p.m.7 views

CVE-2024-51020

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISPdetailedit.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

5.7CVSS5.8AI score0.00305EPSS
SaveExploits0References2
OSV
OSV
added 2024/11/05 1:15 p.m.7 views

CVE-2024-10840

A vulnerability classified as problematic has been found in romadebrian WEB-Sekolah 1.0. Affected is an unknown function of the file /Admin/akunedit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attack remotely. The...

4.8CVSS3.9AI score0.00363EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/11/05 12:00 a.m.8 views

PT-2024-16582 · Unknown · Romadebrian Web-Sekolah

Name of the Vulnerable Software and Affected Versions: romadebrian WEB-Sekolah version 1.0 Description: A vulnerability has been found in the file /Admin/akun edit.php of the component Backend. The manipulation of the argument kode leads to cross site scripting. It is possible to launch the attac...

5.1CVSS4AI score0.00363EPSS
SaveExploits1References10
OSV
OSV
added 2024/11/04 4:15 a.m.8 views

CVE-2024-10759

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-pig.php. The manipulation of the argument pigno/weight/arrived/breed/remark/status leads to sql injection. The attack can be initiated...

8.8CVSS5.7AI score0.00544EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/04 4:15 a.m.30 views

CVE-2024-10759

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-pig.php. The manipulation of the argument pigno/weight/arrived/breed/remark/status leads to sql injection. The attack can be initiated...

8.8CVSS0.00544EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/04 4:00 a.m.34 views

CVE-2024-10759 itsourcecode Farm Management System edit-pig.php sql injection

A vulnerability has been found in itsourcecode Farm Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /edit-pig.php. The manipulation of the argument pigno/weight/arrived/breed/remark/status leads to sql injection. The attack can be initiated...

6.5CVSS0.00544EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/03 2:15 p.m.7 views

CVE-2024-10735

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nomineeid leads to sql injection. The attack can be initiated remotely. The...

9.8CVSS5.8AI score0.00534EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/03 1:15 p.m.6 views

CVE-2024-10734

A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument reciptno leads to sql injection. It is possible to initiate the attack remotely. The...

9.8CVSS5.8AI score0.00534EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/11/03 12:00 a.m.10 views

PT-2024-16498 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Life Insurance Management System version 1.0 Description: A critical issue has been found in the system, affecting the file /editNominee.php. The manipulation of the nominee id argument leads to SQL injection. The attack can be...

9.8CVSS8.1AI score0.00534EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/11/03 12:00 a.m.9 views

PT-2024-16522 · Unknown · Itsourcecode Farm Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Farm Management System version 1.0 Description: A critical vulnerability has been found in the itsourcecode Farm Management System, affecting an unknown part of the file /edit-pig.php. The manipulation of the arguments pigno,...

8.8CVSS7.1AI score0.00544EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2024/11/02 12:00 a.m.7 views

PT-2024-16497 · Unknown · Projectworlds Life Insurance Management System

Name of the Vulnerable Software and Affected Versions: Project Worlds Life Insurance Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /editPayment.php. The manipulation of the recipt no argument leads to SQL injection...

9.8CVSS8.8AI score0.00534EPSS
SaveExploits1References12
NVD
NVD
added 2024/10/31 2:15 a.m.30 views

CVE-2024-48311

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...

8.8CVSS0.00327EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/10/31 12:00 a.m.25 views

CVE-2024-48311

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...

0.00327EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/31 12:00 a.m.17 views

CVE-2024-48311

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...

7.5AI score0.00327EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/31 12:00 a.m.11 views

CVE-2024-48311

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...

8.8CVSS7.7AI score
SaveExploits0References3
CVE
CVE
added 2024/10/31 12:00 a.m.58 views

CVE-2024-48311

CVE-2024-48311 affects Piwigo v14.5.0 and is a Cross-Site Request Forgery (CSRF) vulnerability via the Edit album function. The CVSS v3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) yields a base score of 8.8 (HIGH). The available connected documents confirm the flaw is in Piwigo 14.5.0 and desc...

8.8CVSS7.2AI score0.00327EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/10/31 12:00 a.m.8 views

Piwigo 安全漏洞

Piwigo is Piwigo open source a set of Web-based open source image library software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 14.5.0, which stems from a cross-site request forgery...

8.8CVSS6.7AI score0.00327EPSS
SaveExploits1References1
Rows per page
Query Builder