Lucene search
+L

6692 matches found

CNNVD
CNNVD
added 2023/05/11 12:0 a.m.7 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. SourceCodester Online Computer and Laptop Store version 1.0 suffers from an SQL injection vulnerability that stems from the presence of a SQL injection vulnerability that allows an attacke...

9.8CVSS7.2AI score0.0082EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/05/11 12:0 a.m.8 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by the individual developer Carlo Montero. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem in the file viewproduct.php, where manipulation of the...

9.8CVSS7AI score0.0082EPSS
SaveExploits1References4
OSV
OSV
added 2023/05/08 4:15 a.m.2 views

CVE-2023-30018

Judging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/reviewseresult.php?maineventid=...

9.8CVSS7.3AI score0.00752EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/05/08 12:0 a.m.11 views

MonicaHQ 跨站脚本漏洞

MonicaHQ is a relationship management system from MonicaHQ, Inc. A security vulnerability exists in MonicaHQ version 4.0.0, which can be exploited by a remote attacker to execute malicious code in the application via the people:id/relationships endpoint and CSTIs in the firstname and lastname...

5.4CVSS6AI score0.00643EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/05/08 12:0 a.m.9 views

Judging Management System SQL注入漏洞

Judging Management System is a review management system by Carlo Montero Personal Developer. A security vulnerability exists in Judging Management System v1.0, which was discovered to contain an SQL injection vulnerability via /php-jms/reviewseresult.php?maineventid=...

9.8CVSS8.7AI score0.00752EPSS
SaveExploits1References2
OSV
OSV
added 2023/05/04 5:15 p.m.9 views

CVE-2023-30203

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...

9.8CVSS7.3AI score0.00752EPSS
SaveExploits1References1
Prion
Prion
added 2023/05/04 5:15 p.m.16 views

Sql injection

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...

7.5CVSS9.7AI score0.00752EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/05/04 12:0 a.m.13 views

PT-2023-22526 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The Judging Management System is vulnerable to SQL injection via the "/php-jms/review result.php" endpoint, specifically through the mainevent id parameter. This allows for potential...

9.8CVSS7.5AI score0.00788EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2023/05/04 12:0 a.m.30 views

CVE-2023-30203

Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the eventid parameter at /php-jms/resultsheet.php...

10AI score0.00752EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.13 views

PT-2023-22585 · Unknown · Judging Management System

Name of the Vulnerable Software and Affected Versions: Judging Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the judge id parameter at the "/php-jms/edit judge.php" API endpoint. Recommendations: For Judgi...

9.8CVSS7.4AI score0.00602EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2023/05/03 12:0 a.m.8 views

PT-2023-22586 · Douphp · Douphp

Name of the Vulnerable Software and Affected Versions: DouPHP version 1.7 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the unique id parameter in "/admin/article.php". This enables attackers to...

4.8CVSS5.8AI score0.00341EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2023/05/01 12:0 a.m.6 views

Online DJ Management System SQL注入漏洞

Online DJ Management System is an online DJ management system developed by Carlo Montero. A SQL injection vulnerability exists in version 1.0 of the Online DJ Management System, which is caused by an incorrect manipulation of the parameter id that results in a sql injection...

9.8CVSS7.2AI score0.0072EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/29 12:0 a.m.11 views

PT-2023-19421 · Sourcecodester · Sourcecodester Ac Repair/Services System

Name of the Vulnerable Software and Affected Versions: SourceCodester AC Repair and Services System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/bookings/manage booking.php. The manipulation of the id argument leads ...

6.5CVSS7.3AI score0.0063EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2023/04/29 12:0 a.m.7 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in AC Repair and Services System version 1.0, which stems from a misuse of the parameter id resulting in sql injection...

6.5CVSS6.7AI score0.00526EPSS
SaveExploits0References4
OSV
OSV
added 2023/04/28 11:15 p.m.5 views

CVE-2023-2408

A vulnerability, which was classified as critical, has been found in SourceCodester AC Repair and Services System 1.0. Affected by this issue is some unknown functionality of the file services/view.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotel...

6.5CVSS6.5AI score0.0063EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 2:15 p.m.5 views

CVE-2023-2371

A vulnerability classified as critical was found in SourceCodester Online DJ Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/inquiries/viewdetails.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 2:15 p.m.3 views

CVE-2023-2370

A vulnerability classified as critical has been found in SourceCodester Online DJ Management System 1.0. Affected is an unknown function of the file admin/events/manageevent.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to...

9.8CVSS6.5AI score0.00881EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/28 1:15 p.m.7 views

CVE-2023-2368

A vulnerability was found in SourceCodester Faculty Evaluation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php?page=managequestionnaire. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. Th...

9.8CVSS5.8AI score0.00722EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2023/04/28 12:0 a.m.8 views

PT-2023-19090 · Sourcecodester · Resort Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Resort Reservation System version 1.0 Description: A critical issue has been found in the processing of the file view room.php, where the manipulation of the id argument leads to sql injection. The attack can be initiated...

9.8CVSS7.4AI score0.00766EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/28 12:0 a.m.6 views

Online DJ Management System SQL注入漏洞

Online DJ Management System is an online DJ management system developed by Carlo Montero. A SQL injection vulnerability exists in version 1.0 of the Online DJ Management System, which is caused by an incorrect manipulation of the parameter id that results in a sql injection...

9.8CVSS7.2AI score0.00834EPSS
SaveExploits1References4
Rows per page
Query Builder