Lucene search
+L

1502 matches found

CNNVD
CNNVD
added 2024/11/15 12:0 a.m.5 views

WordPress plugin Yotpo: Product & Photo Reviews for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.1CVSS7.7AI score0.00443EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/11/15 12:0 a.m.3 views

1000 Projects Beauty Parlour Management System 注入漏洞

1000 Projects Beauty Parlour Management System is an open source beauty parlor management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects Beauty Parlour Management System, which stems from the parameter email in the file /admin/forgot-password.php that...

9.8CVSS7.9AI score0.00709EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/12 2:15 a.m.11 views

CVE-2024-11099

A vulnerability was found in code-projects Job Recruitment 1.0 and classified as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the...

9.8CVSS5.8AI score0.00587EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 7:15 p.m.4 views

CVE-2024-11077

A vulnerability, which was classified as critical, was found in code-projects Job Recruitment 1.0. Affected is an unknown function of the file /index.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...

9.8CVSS5.7AI score0.0062EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/11 12:0 a.m.5 views

PT-2024-16740 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment version 1.0 Description: A critical vulnerability was found in the code-projects Job Recruitment software. The issue affects an unknown function of the file /index.php. The manipulation of the email argument lead...

9.8CVSS8.4AI score0.0062EPSS
SaveExploits1References17
CNNVD
CNNVD
added 2024/11/11 12:0 a.m.3 views

Job Recruitment 安全漏洞

Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from a SQL injection vulnerability in the email parameter of the /index.php page...

9.8CVSS7.8AI score0.0062EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/11/11 12:0 a.m.6 views

Teachers Record Management System add-teacher.php File SQL Injection Vulnerability

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

9.1CVSS8AI score0.00493EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/07 12:0 a.m.7 views

PT-2024-16680 · Code Projects · Code-Projects E-Health Care System

Name of the Vulnerable Software and Affected Versions: code-projects E-Health Care System version 1.0 Description: A critical issue was found in the file /Doctor/doctor login.php, where the manipulation of the email argument leads to SQL injection. The attack can be launched remotely. Other...

9.1CVSS7.7AI score0.00624EPSS
SaveExploits1References13
Positive Technologies
Positive Technologies
added 2024/11/03 12:0 a.m.6 views

PT-2024-16499 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue affects the processing of the file /student.php, where the manipulation of the email argument leads to SQL injection. The attack can be initiated...

9.8CVSS8.1AI score0.00587EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/03 12:0 a.m.5 views

Codezips Free Exam Hall Seating Management System SQL注入漏洞

Codezips Free Exam Hall Seating Management System is a free exam hall seating management system from Codezips open source. A SQL injection vulnerability exists in Codezips Free Exam Hall Seating Management System version 1.0, which stems from an incorrect manipulation of the parameter email that...

9.8CVSS7.9AI score0.00628EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/11/02 12:0 a.m.8 views

PT-2024-16500 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown function of the file /teacher.php. The manipulation of the email argument leads to SQL...

9.8CVSS8.1AI score0.00628EPSS
SaveExploits1References11
NVD
NVD
added 2024/10/31 7:15 p.m.31 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

9.1CVSS0.00493EPSS
SaveExploits1References1
OSV
OSV
added 2024/10/31 7:15 p.m.8 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

9.1CVSS5.8AI score0.00493EPSS
SaveExploits1References2
CVE
CVE
added 2024/10/31 12:0 a.m.63 views

CVE-2024-51063

Summary: Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php through the mobile number or email parameter. The issue is reported across multiple feeds and aligned with a high-impact CVSS profile (CVSS 3.1: 9.1, CRITICAL; Confidentiality and Integrit...

9.1CVSS8.3AI score0.00493EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/10/31 12:0 a.m.29 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

0.00493EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/10/31 12:0 a.m.14 views

CVE-2024-51063

Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter...

8.1AI score0.00493EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/31 12:0 a.m.6 views

PHPGurukul Teachers Record Management System 安全漏洞

Teachers Record Management System is a teacher record management system. Teachers Record Management System is vulnerable to a SQL injection vulnerability that stems from the presence of a SQL injection vulnerability in the add-teacher.php file via a cell phone number or email parameter. No detail...

9.1CVSS7.9AI score0.00493EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.6 views

PT-2024-16327 · Unknown · Codezips Free Exam Hall Seating Management System

Name of the Vulnerable Software and Affected Versions: Codezips Free Exam Hall Seating Management System version 1.0 Description: A critical issue was found in the system, affecting the /login.php file. The manipulation of the email argument leads to SQL injection. The attack can be initiated...

9.8CVSS8AI score0.00757EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/10/30 12:0 a.m.13 views

PT-2024-16329 · Unknown · Codezips Online Institute Management System

Name of the Vulnerable Software and Affected Versions: Codezips Online Institute Management System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /login.php. The manipulation of the email argument leads to sql injection. The attack can...

9.8CVSS7.8AI score0.00784EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2024/10/25 5:15 p.m.3 views

CVE-2022-30357

OvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to /profile/updateProfile via the userId and email parameters. Authentication is required...

9.8CVSS5.8AI score0.00292EPSS
SaveExploits1References2
Rows per page
Query Builder