Lucene search
+L

6692 matches found

CNNVD
CNNVD
added 2023/04/14 12:0 a.m.7 views

Video Sharing Website SQL注入漏洞

Video Sharing Website is a video sharing website. A SQL injection vulnerability exists in Campcodes Video Sharing Website version 1.0, which stems from a problem in the file upload.php, where manipulation of the parameter id can lead to sql injection...

7.5CVSS6.9AI score0.0065EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/14 12:0 a.m.13 views

PT-2023-17613 · Campcodes · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A critical vulnerability has been found in the system, affecting the file /admin/offenses/view details.php. The manipulation of the id argument leads to SQL injection...

9.8CVSS6.8AI score0.0074EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/04/14 12:0 a.m.6 views

Online Voting System SQL注入漏洞

Campcodes Advanced Online Voting System is an online voting system. A SQL injection vulnerability exists in Campcodes Advanced Online Voting System v1.0. The vulnerability stems from the lack of validation of externally entered SQL statements in the parameter id of the file /admin/positionsrow.ph...

8.8CVSS8.2AI score0.00747EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/11 12:0 a.m.11 views

PT-2023-17390 · Sourcecodester · Sourcecodester Sales Tracker Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Sales Tracker Management System version 1.0 Description: A critical issue affects some unknown functionality of the file /admin/products/manage product.php, specifically the component GET Parameter Handler. The manipulation of...

9.8CVSS6.9AI score0.00737EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/11 12:0 a.m.6 views

Sales Tracker Management System SQL注入漏洞

Sales Tracker Management System is a sales tracking management system. Sales Tracker Management System v1.0 is vulnerable to SQL injection. The vulnerability originates from the missing validation of the parameter id of /admin/products/manageproduct.php for external input SQL statements. An...

9.8CVSS7.8AI score0.00737EPSS
SaveExploits1References4
NVD
NVD
added 2023/04/10 4:15 p.m.25 views

CVE-2023-1969

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/managestock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be...

9.8CVSS7.5AI score0.00784EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/04/10 12:0 a.m.6 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by the individual developer Carlo Montero. SourceCodester Online Eyewear Shop version 1.0 suffers from a SQL injection vulnerability that stems from a problem with the file /admin/inventory/managestock.php, where manipulation of the parameter id can...

9.8CVSS7AI score0.00784EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/08 12:0 a.m.11 views

PT-2023-17371 · Unknown · Sourcecodester Online Computer/Laptop Store

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Computer and Laptop Store version 1.0 Description: A critical issue was found in the software, affecting an unknown part of the file /classes/Master.php?f=delete sub category. The manipulation of the id argument leads to...

9.8CVSS6.9AI score0.00726EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/04/08 12:0 a.m.14 views

PT-2023-17363 · Unknown · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue has been found in the Password Recovery component, specifically in the file password-recovery.php. The manipulation of the emailid or contactno argument lead...

9.8CVSS7.6AI score0.00737EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/04/08 12:0 a.m.8 views

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store from Carlo Montero's personal developer. Online Computer and Laptop Store v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter id of the fi...

9.8CVSS7.9AI score0.00726EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/04/07 12:0 a.m.4 views

Simple and Beautiful Shopping Cart System SQL注入漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A SQL injection vulnerability exists in SourceCodester Simple and Beautiful Shopping Cart System version 1.0, which stems from a problem in the file deleteuserquery.php, where manipulation of the parameter userid can lead to sql...

9.1CVSS7AI score0.00641EPSS
SaveExploits1References4
OSV
OSV
added 2023/04/06 3:15 p.m.8 views

CVE-2020-36072

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter...

8.8CVSS6.1AI score0.01378EPSS
SaveExploits1References1
OSV
OSV
added 2023/04/06 1:15 p.m.4 views

CVE-2023-1908

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/categories/viewcategory.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. ...

9.8CVSS6.5AI score
SaveExploits0References3
CNNVD
CNNVD
added 2023/04/06 12:0 a.m.4 views

Simple Mobile Comparison Website SQL注入漏洞

Simple Mobile Comparison Website is a mobile comparison website by Carlo Montero personal developer. It allows users to compare the specifications of smartphones. SourceCodester Simple Mobile Comparison Website version 1.0 suffers from a SQL injection vulnerability that stems from a problem in th...

9.8CVSS7.1AI score0.00737EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/04/06 12:0 a.m.15 views

PT-2023-11802 · Unknown · Tailoring Management System

Name of the Vulnerable Software and Affected Versions: Tailor Management System version 1 Description: A SQL injection issue allows a remote attacker to execute arbitrary code via the id parameter. This enables the attacker to potentially access or modify sensitive data. Recommendations: For Tail...

8.8CVSS8.7AI score0.01378EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.11 views

PT-2023-17277 · Sourcecodester · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A critical issue was found in the SourceCodester Online Payroll System, affecting an unknown part of the file /admin/employee row.php. The manipulation of the id argument leads to...

9.8CVSS7.2AI score0.00808EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/04/05 12:0 a.m.14 views

PT-2023-17280 · Unknown · Sourcecodester Online Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Payroll System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/attendance row.php. The manipulation of the id argument leads to sql injection,...

9.8CVSS6.7AI score0.00808EPSS
SaveExploits1References7
OSV
OSV
added 2023/04/04 6:15 p.m.14 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.2CVSS5.8AI score0.00702EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2023/04/04 12:0 a.m.11 views

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

7.1AI score0.00702EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/04/04 12:0 a.m.8 views

XiaoBingby TeaCMS 授权问题漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingby TeaCMS 2.3.3, which stems from an unauthorized access issue in the system that can be exploited by an attacker to elevate privileges via the id and keywords parameters...

7.2CVSS7AI score0.00702EPSS
SaveExploits1References3
Rows per page
Query Builder