Lucene search
+L

7143 matches found

Vulnrichment
Vulnrichment
added 2026/02/06 11:14 p.m.7 views

CVE-2020-37141 AMSS++ v 4.31 - 'id' SQL Injection

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents...

8.8CVSS5.8AI score0.003EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2026/02/06 11:14 p.m.7 views

CVE-2020-37141

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents...

8.8CVSS5.6AI score0.003EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
added 2026/02/06 5:32 p.m.8 views

CVE-2026-2060

A vulnerability was found in code-projects Simple Blood Donor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /simpleblooddonor/editcampaignform.php. Performing a manipulation of the argument ID results in sql injection. It is possible to initiate the...

7.5CVSS5.4AI score0.00339EPSS
SaveExploits1References5Affected Software1
NVD
NVD
added 2026/02/06 5:16 p.m.21 views

CVE-2019-25303

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information...

7.1CVSS0.00222EPSS
SaveExploits0References3
NVD
NVD
added 2026/02/06 5:16 p.m.18 views

CVE-2019-25300

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS0.00222EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/06 4:41 p.m.29 views

CVE-2019-25303

The CVE-2019-25303 entry affects TheJshen ContentManagementSystem 1.04. It describes a SQL injection vulnerability exploitable via the GET parameter id, enabling boolean-based, time-based, and UNION-based techniques to extract or manipulate database information. The available documents consistent...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/02/06 4:41 p.m.7 views

CVE-2019-25303

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/02/06 4:41 p.m.51 views

CVE-2019-25303 TheJshen contentManagementSystem 1.04 - 'id' SQL Injection

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information...

7.1CVSS0.00222EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/06 4:41 p.m.16 views

EUVD-2019-19403

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/02/06 4:41 p.m.15 views

EUVD-2019-19398

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
CVE
CVE
added 2026/02/06 4:41 p.m.26 views

CVE-2019-25300

The CVE-2019-25300 entry concerns thejshen Globitek CMS 1.4. The vulnerability is a SQL injection via the 'id' GET parameter, enabling manipulation of database queries. Attack techniques specified include boolean-based, time-based, and UNION-based SQL injections, which could potentially extract o...

7.1CVSS5.7AI score0.00222EPSS
SaveExploits0References3
attackerkb
attackerkb
added 2026/02/06 4:41 p.m.6 views

CVE-2019-25300

thejshen Globitek CMS 1.4 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to potentially extract or modify database information...

7.1CVSS5.8AI score0.00222EPSS
SaveExploits0References3Affected Software1
attackerkb
attackerkb
added 2026/02/06 4:41 p.m.9 views

CVE-2019-25298

html5snmp 1.11 contains multiple SQL injection vulnerabilities that allow attackers to manipulate database queries through RouterID and RouterIP parameters. Attackers can exploit error-based, time-based, and union-based injection techniques to potentially extract or modify database information by...

7.1CVSS5.8AI score0.00385EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2026/02/06 1:15 p.m.21 views

CVE-2026-2018

A flaw has been found in itsourcecode School Management System 1.0. This affects an unknown part of the file /ramonsys/settings/controller.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used...

9.8CVSS0.00339EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2026/02/06 10:02 a.m.50 views

CVE-2026-2014 itsourcecode Student Management System index.php sql injection

A security flaw has been discovered in itsourcecode Student Management System 1.0. This impacts an unknown function of the file /ramonsys/billing/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

7.5CVSS0.00432EPSS
SaveExploits1References5
attackerkb
attackerkb
added 2026/02/06 9:02 a.m.8 views

CVE-2026-2012

A vulnerability was determined in itsourcecode Student Management System 1.0. The impacted element is an unknown function of the file /ramonsys/facultyloading/index.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly...

7.5CVSS5.3AI score0.00339EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2026/02/06 8:32 a.m.52 views

CVE-2026-2011 itsourcecode Student Management System controller.php sql injection

A vulnerability was found in itsourcecode Student Management System 1.0. The affected element is an unknown function of the file /ramonsys/enrollment/controller.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been made public...

7.5CVSS0.00339EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/02/06 1:26 a.m.23 views

CVE-2025-70792

Cross Site Scripting vulnerability in the "/admin/category/create" endpoint of Microweber 2.0.19. An attacker can manipulate the "relid" parameter in a crafted URL and lure a user with admin privileges into visiting it, achieving JavaScript code execution in the victim's browser. The issue was...

6.1CVSS6AI score0.00281EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2026/02/06 12:00 a.m.22 views

itsourcecode Student Management System SQL注入漏洞

itsourcecode Student Management System is an open-source student management system developed by itsourcecode. Version 1.0 of itsourcecode Student Management System has a SQL injection vulnerability. This vulnerability arises from incorrect handling of the parameter ID in the file...

9.8CVSS7.2AI score0.00339EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2026/02/06 12:00 a.m.26 views

PT-2026-6822

Name of the Vulnerable Software and Affected Versions eLection version 2.0 Description The software contains an authenticated SQL injection issue in the candidate management endpoint. Attackers can manipulate database queries through the id parameter. Exploitation can be performed using SQLMap,...

7.1CVSS6.5AI score0.00466EPSS
SaveExploits0References6
Rows per page
Query Builder