Lucene search
+L

17 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•1 views

CVE-2026-14798: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/visitor-entry.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The exploit is...

6.5CVSS6.6AI score0.00333EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/11 12:00 a.m.•2 views

CVE-2025-11590: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in CodeAstro Gym Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/equipment-entry.php. Executing a manipulation of the argument ename can lead to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS5.6AI score0.00335EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•19 views

EUVD-2008-2690

Malware in sbrugna...

7.5CVSS6.4AI score0.02286EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
•added 2025/05/23 10:21 a.m.•14 views

CVE-2024-7309

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...

5.4CVSS6.2AI score0.00438EPSS
SaveExploits1References1
OSV
OSV
•added 2025/04/03 6:15 a.m.•14 views

CVE-2025-3143

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. T...

8.8CVSS5.7AI score0.00537EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2025/04/03 6:00 a.m.•33 views

CVE-2025-3143 SourceCodester Apartment Visitor Management System visitor-entry.php sql injection

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. T...

6.5CVSS0.00537EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/04/03 12:00 a.m.•18 views

PT-2025-14582 · Sourcecodester · Sourcecodester Apartment Visitor Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Apartment Visitor Management System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Apartment Visitor Management System. The issue affects an unknown function of the file /visitor-entry.ph...

8.8CVSS6.8AI score0.00537EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/03 12:00 a.m.•3 views

CVE-2025-3143: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. T...

8.8CVSS6.4AI score0.00537EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/09 12:00 a.m.•4 views

CVE-2022-38947: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

9.8CVSS6.6AI score0.00644EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/09 12:00 a.m.•39 views

CVE-2022-38947

SQL Injection vulnerability in Flipkart-Clone-PHP version 1.0 in entry.php in producttitle parameter, allows attackers to execute arbitrary code...

0.00644EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/09 12:00 a.m.•67 views

CVE-2022-38947

Flipkart-Clone-PHP version 1.0 is vulnerable to a SQL Injection vulnerability in the entry.php file, specifically within the product_title parameter. This flaw allows an attacker to execute arbitrary code . To mitigate the risk, it is recommended to restrict access to the product_title parameter ...

9.8CVSS8.6AI score0.00644EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/07/31 10:15 a.m.•34 views

CVE-2024-7309

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...

5.4CVSS0.00438EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/07/31 9:31 a.m.•18 views

CVE-2024-7309 SourceCodester Record Management System entry.php cross site scripting

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...

5.3CVSS6.2AI score0.00438EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/31 12:00 a.m.•2 views

CVE-2024-7309: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as problematic. This affects an unknown part of the file entry.php. The manipulation of the argument school leads to cross site scripting. It is possible to initiate the attack remotely. The exploit h...

5.4CVSS3.7AI score0.00438EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/19 12:00 a.m.•2 views

CVE-2024-6901: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Record Management System 1.0. Affected is an unknown function of the file entry.php. The manipulation of the argument school leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

8.8CVSS6.4AI score0.00545EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2018/04/05 3:39 a.m.•14 views

priceblink.com XSS vulnerability

Open Bug Bounty ID: OBB-597396 Description| Value ---|--- Affected Website:| priceblink.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

6.3AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/06/13 12:00 a.m.•3 views

CVE-2008-2695: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in entry.php in phpInv 0.8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...

7.5CVSS6.3AI score0.02286EPSS
SaveExploits2References2
Rows per page
Query Builder