Lucene search
+L

209 matches found

OSV
OSV
added 2024/12/29 12:15 p.m.12 views

CVE-2024-13012

A vulnerability, which was classified as problematic, has been found in code-projects Hostel Management System 1.0. This issue affects some unknown processing of the file /admin/registration.php. The manipulation of the argument fname/mname/lname leads to cross site scripting. The attack may be...

6.1CVSS4AI score0.00526EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/29 12:00 a.m.16 views

Code-Projects Hostel Management System 代码注入漏洞

Code-Projects Hostel Management System is an open source hostel management system from Code-Projects. A code injection vulnerability exists in Code-Projects Hostel Management System version 1.0, which originates from a cross-site scripting vulnerability in the fname/mname/lname parameter of the...

6.1CVSS4.8AI score0.00526EPSS
SaveExploits0References4
OSV
OSV
added 2024/12/27 5:15 a.m.11 views

CVE-2024-12980

A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. Affected is the function flnupdate of the file /parse/alledits.php. The manipulation of the argument fname/lname leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS3.8AI score0.00507EPSS
SaveExploits1References5
OSV
OSV
added 2024/12/26 10:15 p.m.12 views

CVE-2024-12967

A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. Affected is the function flnupdate of the file /parse/alledits.php. The manipulation of the argument fname/lname leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00611EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/12/26 12:00 a.m.9 views

PT-2024-9923 · Unknown · Job Recruitment

Name of the Vulnerable Software and Affected Versions: Job Recruitment version 1.0 Description: A critical vulnerability has been found in the function fln update of the file / parse/ all edits.php. The issue is related to the lack of neutralization of special elements when processing the...

9.8CVSS8.1AI score0.00611EPSS
SaveExploits1References13
OSV
OSV
added 2024/11/23 2:15 p.m.12 views

CVE-2024-11632

A vulnerability was found in code-projects Simple Car Rental System 1.0. It has been classified as critical. Affected is an unknown function of the file /bookcar.php. The manipulation of the argument fname/idno/gender/email/phone/location leads to sql injection. It is possible to launch the attac...

9.8CVSS5.7AI score0.00807EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/23 12:00 a.m.16 views

PT-2024-17147 · Unknown · Code-Projects Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Car Rental System version 1.0 Description: A critical issue has been found in the code-projects Simple Car Rental System. The problem is related to an unknown function of the file /book car.php, where the manipulation of...

9.8CVSS7.8AI score0.00807EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/23 12:00 a.m.13 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from incorrect manipulation of the parameters fname, idno, gender, email, phone, and location can...

9.8CVSS7.9AI score0.00807EPSS
SaveExploits1References5
OSV
OSV
added 2024/11/11 3:15 p.m.10 views

CVE-2024-50991

A Cross Site Scripting XSS vulnerability was found in /ums-sp/admin/registered-users.php in PHPGurukul User Management System v1.0, which allows remote attackers to execute arbitrary code via the "fname" POST request parameter...

4.8CVSS6.1AI score0.00399EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/11 12:00 a.m.13 views

PT-2024-34489 · Unknown · Phpgurukul User Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul User Management System version 1.0 Description: A Cross Site Scripting XSS issue was found in the "/ums-sp/admin/registered-users.php" endpoint, allowing remote attackers to execute arbitrary code via the fname POST request...

4.8CVSS6.9AI score0.00399EPSS
SaveExploits1References4
OSV
OSV
added 2024/11/02 6:15 p.m.12 views

CVE-2024-10702

A vulnerability classified as critical has been found in code-projects Simple Car Rental System 1.0. Affected is an unknown function of the file /signup.php. The manipulation of the argument fname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed...

9.8CVSS5.7AI score0.00614EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/02 12:00 a.m.12 views

Code-Projects Simple Car Rental System SQL注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00614EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/02 12:00 a.m.19 views

PT-2024-16477 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been found in the Simple Car Rental System, affecting an unknown function of the file /signup.php. The manipulation of the fname argument leads to SQL injection. It is...

9.8CVSS8.2AI score0.00614EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
added 2024/08/27 12:00 a.m.12 views

PT-2024-38876 · Sourcecodester · Sourcecodester E-Commerce Website

Name of the Vulnerable Software and Affected Versions: SourceCodester E-Commerce Website version 1.0 Description: A critical issue has been identified in the /Admin/registration.php file, where the manipulation of the fname argument leads to SQL injection. This issue can be initiated remotely. Th...

9.8CVSS7.7AI score0.00739EPSS
SaveExploits1References13
CNNVD
CNNVD
added 2024/08/27 12:00 a.m.7 views

SourceCodester E-Commerce Website SQL注入漏洞

SourceCodester E-Commerce Website is a SourceCodester open source application. A PHP e-commerce website project for bookstores. A SQL injection vulnerability exists in SourceCodester E-Commerce Website version 1.0, which stems from the manipulation of the parameter fname in the file...

9.8CVSS7.9AI score0.00739EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/08/18 12:00 a.m.11 views

itsourcecode Billing System SQL注入漏洞

itsourcecode Billing System is itsourcecode open source a system developed in PHP MySQL database using HTML, CSS, Bootstrap, JavaScript, Ajax, J Query and Modal. this PH billing system project contains an administrator side. This PH Billing System project includes an administrator side where the...

9.8CVSS7.9AI score0.00582EPSS
SaveExploits1References5
OSV
OSV
added 2023/06/09 6:15 a.m.11 views

CVE-2023-0710

The Metform Elementor Contact Form Builder for WordPress is vulnerable to Cross-Site Scripting by using the 'fname' attribute of the 'mfthankyou' shortcode to echo unescaped form submissions in versions up to, and including, 3.3.0. This allows authenticated attackers, with contributor-level...

5.4CVSS6.7AI score0.00389EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/07/11 12:00 a.m.52 views

atoms183 CMS SQL Injection Vulnerability

atoms183 CMS is a content management system by the individual developer of Дмитрий Глазвин. A SQL injection vulnerability exists in atoms183 CMS version 1.0, which can be exploited by an attacker to execute arbitrary commands on search.php via the Name, Fname, and ID parameters...

9.8CVSS10AI score0.01002EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/07 9:15 p.m.21 views

Sql injection

SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...

7.5CVSS9.9AI score0.01002EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2022/07/07 12:00 a.m.10 views

atoms183 CMS SQL注入漏洞

atoms183 CMS is a content management system by the individual developer of Дмитрий Глазвин. A SQL injection vulnerability exists in atoms183 CMS version 1.0, which can be exploited by an attacker to execute arbitrary commands on search.php via the Name, Fname, and ID parameters...

9.8CVSS6.4AI score0.01002EPSS
SaveExploits1References2
Rows per page
Query Builder