Lucene search
+L

1503 matches found

CVE
CVE
added 2024/03/09 12:0 a.m.67 views

CVE-2024-25501

CVE-2024-25501 concerns WinMail (versions 7.1, 5.1, and earlier). The vulnerability allows a remote attacker to execute arbitrary code by sending a crafted script to the email parameter. The impact is described as high confidentiality, integrity, and availability risks (per CVSS 3.1 metrics: AV:N...

8.8CVSS7.8AI score0.0084EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/03/09 12:0 a.m.20 views

CVE-2024-25501

An issue WinMail v.7.1 and v.5.1 and before allows a remote attacker to execute arbitrary code via a crafted script to the email parameter...

7.8AI score0.0084EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/03/08 12:0 a.m.38 views

Customer Support System SQL Injection Vulnerability (CNVD-2024-14032)

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from ...

8.8CVSS7.9AI score0.00761EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/03/07 12:0 a.m.7 views

PHP MySQL User Signup Login System SQL Injection Vulnerability

The PHP MySQL User Signup Login System is a login and registration form using HTML, PHP and MySQL. A SQL injection vulnerability exists in version 1.0 of the PHP MySQL User Signup Login System, which originates from an SQL injection vulnerability in the email parameter of the /login.php file...

9.8CVSS7.9AI score0.00602EPSS
SaveExploits0References4
OSV
OSV
added 2024/03/06 11:1 a.m.37 views

BIT-PHPLIST-2021-3188

phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports...

10CVSS9.4AI score0.01788EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.19 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS6AI score0.0045EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/06 1:15 a.m.7 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/06 1:15 a.m.23 views

Cross site scripting

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

5.9AI score0.0045EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/06 12:0 a.m.5 views

Customer Support System 跨站脚本漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a cross-site scripting vulnerability that stems fro...

6.1CVSS5.9AI score0.0045EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/03/06 12:0 a.m.21 views

CVE-2023-49973

A cross-site scripting XSS vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter at /customersupport/index.php?page=customerlist...

5.7AI score0.0045EPSS
SaveExploits1References2
NVD
NVD
added 2024/03/05 2:15 p.m.12 views

CVE-2024-27627

A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...

6.1CVSS5.9AI score0.00424EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/05 2:15 p.m.16 views

Cross site scripting

A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...

6.3AI score0.00424EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/05 12:15 a.m.18 views

CVE-2023-49546

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...

8.8CVSS7.8AI score0.00761EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/05 12:15 a.m.6 views

CVE-2023-49546

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...

8.8CVSS5.8AI score0.00761EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.9 views

CVE-2023-49546

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...

8.8CVSS5.9AI score0.00761EPSS
SaveExploits1References3
Prion
Prion
added 2024/03/05 12:15 a.m.21 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the email parameter at /customersupport/ajax.php...

8.6AI score0.00761EPSS
SaveExploits1References2
CVE
CVE
added 2024/03/05 12:0 a.m.49 views

CVE-2024-27627

CVE-2024-27627 : A reflected cross-site scripting (XSS) vulnerability exists in SuperCali 1.1.0. The issue allows remote attackers to inject and execute arbitrary JavaScript code via the email parameter in the bad_password.php page. Concrete details across sources confirm the vulnerable component...

6.1CVSS6AI score0.00424EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/05 12:0 a.m.18 views

CVE-2024-27627

A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...

6.1AI score0.00424EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.7 views

Customer Support System 安全漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from ...

8.8CVSS8.2AI score0.00761EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/05 12:0 a.m.18 views

CVE-2024-27627

A reflected cross-site scripting XSS vulnerability exists in SuperCali version 1.1.0, allowing remote attackers to execute arbitrary JavaScript code via the email parameter in the badpassword.php page...

6.1AI score0.00424EPSS
SaveExploits0References1
Rows per page
Query Builder