Lucene search
+L

355 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/09 12:00 a.m.•3 views

CVE-2025-2126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the...

8.8CVSS6.6AI score0.11229EPSS
SaveExploits2References1
OSV
OSV
•added 2024/12/28 10:15 p.m.•14 views

CVE-2024-12998

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

6.1CVSS3.9AI score0.00487EPSS
SaveExploits1References4
CVE
CVE
•added 2024/12/28 9:31 p.m.•104 views

CVE-2024-12998

CVE-2024-12998 affects Code-Projects Online Car Rental System 1.0. A cross-site scripting vulnerability exists in an unknown part of the /index.php file within the GET Parameter Handler. The issue allows remote initiation of an attack and has public disclosure. Connected sources consistently desc...

6.9CVSS4.4AI score0.00487EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
•added 2024/12/28 9:31 p.m.•13 views

CVE-2024-12998 code-projects Online Car Rental System GET Parameter index.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

6.9CVSS5.9AI score0.00487EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/12/28 9:31 p.m.•46 views

CVE-2024-12998 code-projects Online Car Rental System GET Parameter index.php cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

6.9CVSS0.00487EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/28 12:00 a.m.•2 views

CVE-2024-12998: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects Online Car Rental System 1.0. This affects an unknown part of the file /index.php of the component GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely...

6.9CVSS3.9AI score0.00487EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/23 1:15 a.m.•42 views

CVE-2024-9093

A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Parameter Handler. The manipulation of the argument list leads to sql injection. It is possible to initiat...

7.2CVSS0.00541EPSS
SaveExploits1References5
CVE
CVE
•added 2024/09/23 12:31 a.m.•81 views

CVE-2024-9093

CVE-2024-9093 affects SourceCodester Profile Registration without Reload Refresh 1.0, specifically the del.php file in the GET Parameter Handler. The vulnerability is a SQL injection caused by manipulation of the argument list, enabling remote exploitation with no user interaction. Multiple sourc...

7.2CVSS6.9AI score0.00541EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/23 12:00 a.m.•4 views

CVE-2024-9093: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Profile Registration without Reload Refresh 1.0. This affects an unknown part of the file del.php of the component GET Parameter Handler. The manipulation of the argument list leads to sql injection. It is possible to initiat...

7.2CVSS6.4AI score0.00541EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/09/22 12:00 a.m.•16 views

PT-2024-39427 · Unknown · Sourcecodester Profile Registration Without Reload Refresh

Name of the Vulnerable Software and Affected Versions: SourceCodester Profile Registration without Reload Refresh version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file del.php of the component GET Parameter Handler. The manipulatio...

7.2CVSS8.4AI score0.00541EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/29 12:00 a.m.•4 views

CVE-2024-7188: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the component GET Parameter Handler. The manipulation of the argument range2 leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS7AI score0.07016EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/03/20 2:00 a.m.•16 views

CVE-2024-2669 Campcodes Online Job Finder System GET Parameter controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/employee/controller.php of the component GET Parameter Handler. The manipulation of the argument EMPLOYEEID leads to sql injection. The...

6.5CVSS7.4AI score0.00601EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•4 views

CVE-2024-2669: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/employee/controller.php of the component GET Parameter Handler. The manipulation of the argument EMPLOYEEID leads to sql injection. The...

6.5CVSS5.5AI score0.00601EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/01/07 5:00 a.m.•55 views

CVE-2024-0265 SourceCodester Clinic Queuing System GET Parameter index.php file inclusion

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argument page leads to file inclusion. The attack may be initiate...

6.5CVSS9.3AI score0.20938EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/07 12:00 a.m.•2 views

CVE-2024-0265: External Control of File Name or Path

A vulnerability was found in SourceCodester Clinic Queuing System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /index.php of the component GET Parameter Handler. The manipulation of the argument page leads to file inclusion. The attack may be initiate...

8.8CVSS6.4AI score0.20938EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2023/11/26 11:31 p.m.•36 views

CVE-2023-6301 SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input alert...

4CVSS6.2AI score0.00608EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/11/26 12:00 a.m.•17 views

Best Courier Management System Cross-Site Scripting Vulnerability

Best Courier Management System is a courier management system by Mayuri K. Individual developer. A cross-site scripting vulnerability exists in SourceCodester Best Courier Management System version 1.0, which stems from the presence of an unknown function in the parcellist.php file in the compone...

6.1CVSS6.1AI score0.00608EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/26 12:00 a.m.•2 views

CVE-2023-6301: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file parcellist.php of the component GET Parameter Handler. The manipulation of the argument id with the input leads...

6.1CVSS3.6AI score0.00608EPSS
SaveExploits1References2
NVD
NVD
•added 2023/09/29 5:15 p.m.•36 views

CVE-2023-5272

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file editparcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to...

8.8CVSS6.7AI score0.00751EPSS
SaveExploits1References3
Prion
Prion
•added 2023/09/29 5:15 p.m.•28 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file editparcel.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to...

5.2CVSS8.9AI score0.00751EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder