Lucene search
+L

945 matches found

CNNVD
CNNVD
added 2023/11/02 12:0 a.m.13 views

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

7.5CVSS8.1AI score0.00533EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.6 views

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can be used to help a university or college manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0,...

7.5CVSS8.1AI score0.00562EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.9 views

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

7.5CVSS8.1AI score0.00562EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.8 views

Simple Student Information System Cross-Site Scripting Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A cross-site scripting vulnerability exists in Campcodes Simple Student Information System versi...

6.1CVSS5.6AI score0.00505EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.9 views

PT-2023-32427 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical issue was found in the system, affecting an unknown part of the file /admin/students/manage academic.php. The manipulation of the id argument leads to SQL...

7.5CVSS6.4AI score0.00562EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/11/02 12:0 a.m.9 views

PT-2023-32421 · Unknown · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical vulnerability has been found in the system, affecting an unknown part of the file /admin/index.php. The manipulation of the argument id leads to SQL injection. Th...

7.5CVSS6.4AI score0.00533EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2023/11/02 12:0 a.m.7 views

Simple Student Information System SQL Injection Vulnerability

Simple Student Information System is a web-based application platform by Carlo Montero, an individual developer. It can help a university or college to manage student information and academic records. A SQL injection vulnerability exists in Simple Student Information System version 1.0, which ste...

7.5CVSS8.1AI score0.00562EPSS
SaveExploits1References4
Prion
Prion
added 2023/10/25 6:17 p.m.19 views

Path traversal

In the module "Product Catalog CSV, Excel, XML Export PRO" exportproducts in versions up to 4.1.1 from MyPrestaModules for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack. Due to a lack of permissions control and a lack of control in...

5CVSS7.4AI score0.00798EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/03 12:0 a.m.11 views

DTS Monitoring Operating System Command Injection Vulnerability

DTS Monitoring is an information system monitoring platform from DTS Corporation. An operating system command injection vulnerability exists in DTS Monitoring version 3.57.0, which originates from the ip parameter in the Ping check function being susceptible to operating system command injection...

9.8CVSS7.4AI score0.02503EPSS
SaveExploits1References2
OSV
OSV
added 2023/09/17 4:15 a.m.10 views

CVE-2023-5018

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

9.8CVSS5.7AI score0.00425EPSS
SaveExploits0References2
Prion
Prion
added 2023/09/17 4:15 a.m.26 views

Sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS9.7AI score0.00425EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/09/17 3:31 a.m.21 views

CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS7.6AI score0.00425EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/09/17 3:31 a.m.32 views

CVE-2023-5018 SourceCodester Lost and Found Information System POST Parameter sql injection

A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...

6.5CVSS10AI score0.00425EPSS
SaveExploits0References2
CVE
CVE
added 2023/09/17 3:31 a.m.43 views

CVE-2023-5018

SourceCodester Lost and Found Information System 1.0 has a SQL injection in the POST Parameter Handler, specifically via the id parameter in /classes/Master.php?f=save_category. The issue is triggered by manipulating id, enabling remote exploitation and impacting confidentiality, integrity, and a...

9.8CVSS7.4AI score0.00425EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/09/17 12:0 a.m.9 views

Lost and Found Information System SQL Injection Vulnerability

Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from an unknown part of the file /classes/Master.php?f=savecategory in the...

9.8CVSS7.8AI score0.00425EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2023/09/14 12:0 a.m.10 views

Ericsson Mobile Switching Center Server Path Traversal Vulnerability

Ericsson Mobile Switching Center Server is Ericsson's data center server. A security vulnerability exists in Ericsson Mobile Switching Center Server that stems from a directory traversal vulnerability. Affected Products and Versions: Ericsson Mobile Switching Center Server BC version 18A, IS 3.1...

4.3CVSS6.6AI score0.00548EPSS
SaveExploits0References4
NVD
NVD
added 2023/09/06 6:15 p.m.40 views

CVE-2023-38485

Vulnerabilities exist in the BIOS implementation of Aruba 9200 and 9000 Series Controllers and Gateways that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker could exploit this vulnerability to gain access to and change underlying sensitive information in...

8CVSS8.1AI score0.00392EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/08/22 12:0 a.m.9 views

Geomatika IsiGeo Web SQL注入漏洞

Geomatika IsiGeo Web is Geomatika's geographic information system GIS software for the collection, management, analysis, and visualization of geospatial data. A security vulnerability exists in Geomatika IsiGeo Web version 6.0, which originates from a vulnerability that allows an authenticated...

6.5CVSS6.8AI score0.01246EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2023/08/14 1:15 p.m.5 views

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

4.8CVSS5.8AI score0.00642EPSS
SaveExploits1References5
NVD
NVD
added 2023/08/14 1:15 p.m.31 views

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

4.8CVSS5AI score0.00642EPSS
SaveExploits1References4
Rows per page
Query Builder