Lucene search
+L

1143 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/06 12:00 a.m.•8 views

CVE-2023-33677: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Lost and Found Information System's Version 1.0 is vulnerable to unauthenticated SQL Injection at "?page=items/view&id="...

7.5CVSS5.8AI score0.00408EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/02/29 12:00 a.m.•14 views

Student Information System Security Breach

Student Information System is a web-based application platform by Carlo Montero, a personal developer. It can help a university or college to manage student information and academic records. A security vulnerability exists in Student Information Systems version v.3053. A remote attacker can explo...

6.1CVSS6.3AI score0.00555EPSS
SaveExploits1References3
Openbugbounty
Openbugbounty
•added 2024/02/17 9:08 a.m.•16 views

geographic-information-system.cioreview.com Cross Site Scripting vulnerability OBB-3854019

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
OSV
OSV
•added 2024/02/14 2:16 p.m.•15 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2024/02/14 2:16 p.m.•10 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References3
NVD
NVD
•added 2024/02/14 2:16 p.m.•27 views

CVE-2023-6441

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS9.9AI score0.00719EPSS
SaveExploits0References2
Prion
Prion
•added 2024/02/14 2:16 p.m.•26 views

Sql injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection.This issue affects University Information System: before 12.12.2023...

7.5CVSS7.9AI score0.00719EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/14 1:11 p.m.•27 views

CVE-2023-6441 SQLi in UNI-PA's University Information System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References2
CVE
CVE
•added 2024/02/14 1:11 p.m.•66 views

CVE-2023-6441

The CVE-2023-6441 entry concerns the UNI-PA University Information System, where an SQL Injection flaw arises from improper neutralization of special elements. Affected products/versions: University Information System prior to 12.12.2023. Impact is described (per sources) as high for confidential...

9.8CVSS7.4AI score0.00719EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2024/02/14 1:11 p.m.•39 views

CVE-2023-6441 SQLi in UNI-PA's University Information System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS10AI score0.00719EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/02/14 12:00 a.m.•18 views

PT-2024-14955 · Unknown · University Information System

Name of the Vulnerable Software and Affected Versions: University Information System versions prior to 12.12.2023 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

9.8CVSS8.4AI score0.00719EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/14 12:00 a.m.•3 views

CVE-2023-6441: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc. University Information System allows SQL Injection. This issue affects University Information System: before 12.12.2023...

9.8CVSS5.8AI score0.00719EPSS
SaveExploits0References4
NVD
NVD
•added 2024/01/13 6:15 p.m.•34 views

CVE-2024-0497

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

9.8CVSS7.4AI score0.005EPSS
SaveExploits0References3
Prion
Prion
•added 2024/01/13 6:15 p.m.•32 views

Sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS7.7AI score0.005EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/13 5:31 p.m.•11 views

CVE-2024-0497 Campcodes Student Information System sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS8.3AI score0.005EPSS
SaveExploits0References3
CVE
CVE
•added 2024/01/13 5:31 p.m.•72 views

CVE-2024-0497

CVE-2024-0497 affects Campcodes Student Information System 1.0. The vulnerability is a SQL injection in the file /classes/Users.php?f=save, triggered by manipulating the username argument. It can be exploited remotely and has been publicly disclosed. Affected components are the /classes/Users.php...

9.8CVSS9.7AI score0.005EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2024/01/13 5:31 p.m.•46 views

CVE-2024-0497 Campcodes Student Information System sql injection

A vulnerability was found in Campcodes Student Information System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Users.php?f=save. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS10AI score0.005EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/13 2:15 p.m.•35 views

CVE-2024-0489

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/action/editchicken.php. The manipulation of the argument ref leads to sql injection. The attack can be initiated remotely...

9.8CVSS7.4AI score0.005EPSS
SaveExploits0References3
CVE
CVE
•added 2024/01/13 1:31 p.m.•77 views

CVE-2024-0489

CVE-2024-0489 affects code-projects Fighting Cock Information System 1.0. Affected component: the /admin/action/edit_chicken.php file, where manipulation of the ref argument leads to SQL injection. Exploitation is remote and public (VDB-250594 referenced). Multiple sources corroborate SQL injecti...

9.8CVSS9.7AI score0.005EPSS
SaveExploits0References3Affected Software1
NVD
NVD
•added 2024/01/13 1:15 p.m.•30 views

CVE-2024-0488

A vulnerability was found in code-projects Fighting Cock Information System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/action/new-feed.php. The manipulation of the argument typefeed leads to sql injection. It is possible to initiate the attack remotel...

9.8CVSS7.4AI score0.005EPSS
SaveExploits0References3
Rows per page
Query Builder