Lucene search
+L

275 matches found

Kitploit
Kitploit
•added 2026/09/24 11:58 p.m.•11 views

CVE-2025-6860

CVE-2025-6860 エクスプロイトツール C言語で書かれた概念実証のコマンドラインツールで、staffcommision.php(パラメータ fromdate と todate)のSQLインジェクション脆弱性 CVE‑2025‑6860 を検出(および初歩的な悪用)します。HTTPリクエストに libcurl を利用し、一般的なペイロードとユーザーエージェントをローテーションし、応答からSQLエラーパターンをスキャンし、カラフルでシステムコール駆動のコンソール出力を生成します。 特徴 自動ペイロードローテーション fromdate と todate...

8.8CVSS6.9AI score0.0042EPSS
SaveExploits2
EUVD
EUVD
•added 2026/09/15 12:31 a.m.•10 views

EUVD-2026-78223

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References7
NVD
NVD
•added 2026/09/15 12:17 a.m.•7 views

CVE-2026-90841

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS0.00431EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•0 views

CVE-2026-90841: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS5.6AI score0.00431EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/14 11:30 p.m.•11 views

CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/09/14 11:30 p.m.•30 views

CVE-2026-90841 PHPGurukul Blood Donor Management System Report Endpoint Report.php sql injection

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS0.00431EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/09/14 12:00 a.m.•18 views

PT-2026-91765

A security flaw has been discovered in PHPGurukul Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /application/controllers/admin/Report.php of the component Report Endpoint. The manipulation of the argument fromdate/todate results in sql...

7.5CVSS7AI score0.00431EPSS
SaveExploits0References7
NVD
NVD
•added 2026/07/30 9:16 p.m.•17 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS0.00468EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/07/30 12:00 a.m.•17 views

EUVD-2025-210555

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

6AI score0.00468EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/30 12:00 a.m.•37 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

0.00468EPSS
SaveExploits0References1
CVE
CVE
•added 2026/07/30 12:00 a.m.•37 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS6AI score0.00468EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/30 12:00 a.m.•2 views

CVE-2025-69935: Improper Neutralization of Special Elements used in an SQL Command

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

9.8CVSS5.8AI score0.00468EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/30 12:00 a.m.•22 views

PT-2026-66584

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenue report.php via the fromDate parameter...

6AI score0.00468EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/30 12:00 a.m.•10 views

CVE-2025-69935

CodeAstro Membership Management System 1.0 is vulnerale to SQL Injection in the report.php and revenuereport.php via the fromDate parameter...

5.8AI score0.00468EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/06 5:16 a.m.•32 views

CVE-2026-14796

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS0.00333EPSS
SaveExploits0References6
attackerkb
attackerkb
•added 2026/07/06 4:15 a.m.•14 views

CVE-2026-14796

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6Affected Software1
CVE
CVE
•added 2026/07/06 4:15 a.m.•59 views

CVE-2026-14796

CVE-2026-14796 affects CodeAstro Apartment Visitor Management System 1.0. Affected component: /apartment-visitor/report.php; vulnerability: SQL injection triggered by manipulating the fromdate parameter. Attackable remotely over network with no user interaction; attacker privileges required: LOW....

6.5CVSS6.5AI score0.00333EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/07/06 4:15 a.m.•27 views

EUVD-2026-41807

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.8AI score0.00333EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/07/06 4:15 a.m.•15 views

CVE-2026-14796 CodeAstro Apartment Visitor Management System report.php sql injection

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.8AI score0.00333EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/06 12:00 a.m.•1 views

CVE-2026-14796: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. This affects an unknown part of the file /apartment-visitor/report.php. Performing a manipulation of the argument fromdate results in sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS5.5AI score0.00333EPSS
SaveExploits0References3
Rows per page
Query Builder