Lucene search
+L

11692 matches found

CNVD
CNVD
added 2021/07/24 12:00 a.m.61 views

PHPGurukul Student Record System SQL Injection Vulnerability (CNVD-2022-58222)

PHPGurukul Student Record System is an application that is vulnerable to SQL injection in version 4.0 of the PHPGurukul Student Record System. The vulnerability stems from a lack of validation of external input SQL statements in the id parameter of edit-std.php, which can be exploited by remote...

8.8CVSS5.4AI score0.02491EPSS
SaveExploits1References1
CNVD
CNVD
added 2021/07/24 12:00 a.m.58 views

PHPGurukul Student Record System SQL注入漏洞

PHPGurukul Student Record System is an application that is vulnerable to SQL injection. The vulnerability stems from a lack of validation of external input SQL statements in the cid parameter of edit-course.php, which can be exploited by remote attackers to through to execute arbitrary SQL...

8.8CVSS5.7AI score0.02265EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/07/23 11:15 a.m.4 views

CVE-2021-26799

Cross Site Scripting XSS vulnerability in admin/files/edit in Omeka Classic =2.7 allows remote attackers to inject arbitrary web script or HTML...

6.1CVSS6.3AI score0.01042EPSS
SaveExploits1References3
CNVD
CNVD
added 2021/07/23 12:00 a.m.42 views

CASAP Automated Enrollment SQL Injection Vulnerability (CNVD-2021-57782)

CASAP Automated Enrollment is an automated enrollment system for the CASAP organization in the United States. The purpose of the project is to provide CASAP with an automated enrollment system to streamline the school process and make it more effective, efficient and easy to retrieve...

9.8CVSS2.9AI score0.01476EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 8:15 p.m.6 views

CVE-2021-25211

Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php...

9.8CVSS6AI score0.01874EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 7:15 p.m.6 views

CVE-2021-31581

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

4.4CVSS5.8AI score0.01217EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/22 7:15 p.m.28 views

Design/Logic Flaw

The restricted shell provided by Akkadian Provisioning Manager Engine PME can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version 3.0 and later,...

2.1CVSS4.8AI score0.01217EPSS
SaveExploits1References1Affected Software2
OSV
OSV
added 2021/07/22 6:15 p.m.14 views

CVE-2021-26226

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edituser.php...

9.8CVSS6.1AI score0.01476EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 5:15 p.m.10 views

CVE-2021-26227

Cross-site scripting XSS vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the student information parameters to editstud.php...

6.1CVSS5.9AI score0.00872EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 5:15 p.m.9 views

CVE-2021-26229

SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to editstud.php...

9.8CVSS7.6AI score0.01536EPSS
SaveExploits1References1
OSV
OSV
added 2021/07/22 4:15 p.m.8 views

CVE-2021-26762

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php...

8.8CVSS7.6AI score0.02265EPSS
SaveExploits1References3
OSV
OSV
added 2021/07/22 4:15 p.m.8 views

CVE-2021-26764

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php...

8.8CVSS7.6AI score0.02491EPSS
SaveExploits1References4
OSV
OSV
added 2021/07/22 4:15 p.m.10 views

CVE-2021-26765

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...

9.8CVSS6.1AI score0.02924EPSS
SaveExploits1References4
NVD
NVD
added 2021/07/22 4:15 p.m.27 views

CVE-2021-26764

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php...

8.8CVSS0.02491EPSS
SaveExploits1References4
Prion
Prion
added 2021/07/22 4:15 p.m.21 views

Sql injection

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php...

6.5CVSS9AI score0.02265EPSS
SaveExploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/22 4:15 p.m.6 views

CVE-2021-26762

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the cid parameter to edit-course.php...

8.8CVSS8.7AI score0.02265EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2021/07/22 4:15 p.m.7 views

CVE-2021-26765

SQL injection vulnerability in PHPGurukul Student Record System 4.0 allows remote attackers to execute arbitrary SQL statements, via the sid parameter to edit-sub.php...

9.8CVSS9.2AI score0.02924EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/07/22 3:56 p.m.33 views

CVE-2021-26764

SQL injection vulnerability in PHPGurukul Student Record System v 4.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to edit-std.php...

9.3AI score0.02491EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.11 views

PHPGurukul Student Record System SQL注入漏洞

PHPGurukul Student Record System is an application. A SQL injection vulnerability exists in PHPGurukul Student Record System version 4.0, which stems from the lack of validation of externally entered SQL statements in the sid parameter of edit-sub.php, and can be exploited by remote attackers to...

9.8CVSS6.3AI score0.02924EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/07/22 12:00 a.m.10 views

PHPGurukul Student Record System SQL注入漏洞

PHPGurukul Student Record System is an application that is vulnerable to SQL injection. The vulnerability stems from a lack of validation of external input SQL statements in the cid parameter of edit-course.php, which can be exploited by remote attackers to through to execute arbitrary SQL...

8.8CVSS6.3AI score0.02265EPSS
SaveExploits1References4
Rows per page
Query Builder