Lucene search
+L

6693 matches found

Prion
Prion
added 2024/03/05 12:15 a.m.21 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

8.6AI score0.00456EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/05 12:15 a.m.24 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

8.2AI score0.00519EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.12 views

Customer Support System 安全漏洞

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that stems from a lac...

7.3CVSS8.2AI score0.00456EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/04 1:15 a.m.5 views

CVE-2024-2154

A vulnerability has been found in SourceCodester Online Mobile Management Store 1.0 and classified as critical. This vulnerability affects unknown code of the file viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS5.8AI score0.00634EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2024/03/04 12:0 a.m.12 views

CVE-2023-49969

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

8.5AI score0.00519EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/04 12:0 a.m.12 views

CVE-2023-49968

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

8.3AI score0.00456EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/03/04 12:0 a.m.5 views

Online Mobile Management Store SQL Injection Vulnerability

Online Mobile Management Store is an online mobile store management system. A SQL injection vulnerability exists in Online Mobile Management Store version 1.0, which originates from a SQL injection vulnerability in the parameter id of the file viewproduct.php...

9.8CVSS7.9AI score0.00634EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/03/04 12:0 a.m.29 views

CVE-2023-49968

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/managedepartment.php...

8.1AI score0.00456EPSS
SaveExploits1References2
CVE
CVE
added 2024/03/04 12:0 a.m.55 views

CVE-2023-49969

Vulnerability summary : Customer Support System v1 suffers from a SQL injection in the id parameter of /customer_support/index.php?page=edit_customer. The root cause is a lack of validation of the id parameter, allowing crafted input to alter SQL statements and potentially access data. Impact and...

4.3CVSS8.1AI score0.00519EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2024/03/04 12:0 a.m.22 views

CVE-2023-49969

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the id parameter at /customersupport/index.php?page=editcustomer...

8.1AI score0.00519EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/03/03 12:0 a.m.10 views

PT-2024-18952 · Sourcecodester · Sourcecodester Online Mobile Management Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Mobile Management Store version 1.0 Description: A critical issue has been found in the software, affecting the file view product.php. The manipulation of the id argument leads to SQL injection. The attack can be initiat...

9.8CVSS8.4AI score0.00634EPSS
SaveExploits1References7
OSV
OSV
added 2024/03/01 12:15 a.m.4 views

CVE-2024-2022

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/listipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can ...

9.8CVSS5.7AI score0.08537EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2024/02/29 12:0 a.m.35 views

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

8.6AI score0.01182EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2024/02/29 12:0 a.m.12 views

CVE-2023-51801

SQL Injection vulnerability in the Simple Student Attendance System v.1.0 allows a remote attacker to execute arbitrary code via a crafted payload to the id parameter in the studentform.php and the classform.php pages...

8.7AI score0.01182EPSS
SaveExploits2References1
CNVD
CNVD
added 2024/02/28 12:0 a.m.82 views

Simple School Managment System SQL Injection Vulnerability (CNVD-2024-14035)

Simple School Managment System is Code-projects open source a simple school management system . Simple School Managment System version 1.0 SQL injection vulnerability , the vulnerability stems from the application lack of validation of external input SQL statement , an attacker can exploit the...

8.8CVSS7.9AI score0.00721EPSS
SaveExploits1References1
OSV
OSV
added 2024/02/27 9:15 a.m.9 views

CVE-2023-7198

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References IDOR in postid= parameter. Authenticated users are able to delete private notes associated with different user accounts. This poses a significant security risk as it violates the principle of...

4.3CVSS5.8AI score0.00402EPSS
SaveExploits2References1
OSV
OSV
added 2024/02/26 10:15 p.m.5 views

CVE-2024-25248

SQL Injection vulnerability in the orderGoodsDelivery function in Niushop B2B2C V5 allows attackers to run arbitrary SQL commands via the orderid parameter...

9.8CVSS6AI score0.00628EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.9 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can...

8.8CVSS8AI score0.00628EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.4 views

WordPress Plugin Brizy - Page Builder Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.5CVSS6.6AI score0.00817EPSS
SaveExploits0References4
OSV
OSV
added 2024/02/23 4:15 p.m.6 views

CVE-2024-1821

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...

8.8CVSS5.6AI score0.00537EPSS
SaveExploits0References3
Rows per page
Query Builder