Lucene search
+L

944 matches found

CNNVD
CNNVD
added 2024/03/19 12:0 a.m.8 views

OpenClinic GA Security Vulnerability

OpenClinic GA is an open source hospital information management system. The system supports financial management, clinical management and laboratory management. A security vulnerability exists in OpenClinic GA version 5.247.01, which stems from the presence of a Reflective Cross-Site Scripting XS...

6.1CVSS5.7AI score0.0045EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/07 9:15 a.m.17 views

CVE-2023-33676

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id=" which can be escalated to the remote command execution...

8.4CVSS8.1AI score0.00672EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/07 12:0 a.m.70 views

CVE-2023-33676

Sourcecodester Lost and Found Information System, Version 1.0, is vulnerable to unauthenticated SQL injection in the endpoint /items/view (parameter id) via the query string ?page=items/view&id=*, which can escalate to remote command execution. Affected software/component: Sourcecodester Lost and...

8.4CVSS8.4AI score0.00672EPSS
SaveExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2024/03/06 1:15 a.m.9 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS5.8AI score0.00404EPSS
SaveExploits0References3
NVD
NVD
added 2024/03/06 1:15 a.m.16 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS7.8AI score0.00404EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/06 12:0 a.m.60 views

CVE-2023-33677

CVE-2023-33677 affects Sourcecodester Lost and Found Information System v1.0. The vulnerability is an unauthenticated SQL Injection exposed at the API endpoint ?page=items/view&id=. The root cause is improper input handling for the id parameter, allowing crafted input to influence database querie...

7.5CVSS8.1AI score0.00404EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/03/06 12:0 a.m.9 views

CVE-2023-33677

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

8.2AI score0.00404EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/02/29 12:0 a.m.8 views

Student Information System Security Breach

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A security vulnerability exists in Student Information Systems version v.3053. A remote attacker can explo...

6.1CVSS6.3AI score0.00555EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
added 2024/02/17 9:8 a.m.14 views

geographic-information-system.cioreview.com Cross Site Scripting vulnerability OBB-3854019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
NVD
NVD
added 2024/02/14 2:16 p.m.22 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS9.9AI score0.00719EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/02/14 2:16 p.m.9 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References3
OSV
OSV
added 2024/02/14 2:16 p.m.8 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/14 2:16 p.m.19 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...

7.5CVSS7.9AI score0.00719EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/02/14 1:11 p.m.15 views

CVE-2023-6441 SQLi in UNI-PA's University Information System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/02/14 1:11 p.m.33 views

CVE-2023-6441 SQLi in UNI-PA's University Information System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS10AI score0.00719EPSS
SaveExploits0References2
CVE
CVE
added 2024/02/14 1:11 p.m.53 views

CVE-2023-6441

The CVE-2023-6441 entry concerns the UNI-PA University Information System, where an SQL Injection flaw arises from improper neutralization of special elements. Affected products/versions: University Information System prior to 12.12.2023. Impact is described (per sources) as high for confidential...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/02/14 12:0 a.m.12 views

PT-2024-14955 · Unknown · University Information System

Name of the Vulnerable Software and Affected Versions: University Information System versions prior to 12.12.2023 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS8.4AI score0.00719EPSS
SaveExploits0References6
NVD
NVD
added 2024/01/13 6:15 p.m.25 views

CVE-2024-0497

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7.4AI score0.005EPSS
SaveExploits0References3
Prion
Prion
added 2024/01/13 6:15 p.m.26 views

Sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS7.7AI score0.005EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/13 5:31 p.m.6 views

CVE-2024-0497 Campcodes Student Information System sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS8.3AI score0.005EPSS
SaveExploits0References3
Rows per page
Query Builder