Lucene search
+L

70 matches found

Positive Technologies
Positive Technologies
added 2022/12/02 12:0 a.m.7 views

PT-2022-27187 · Unknown · Sanitization Management System

Name of the Vulnerable Software and Affected Versions: Sanitization Management System version 1.0 Description: The issue concerns SQL Injection, which can be exploited via the /php-sms/admin/?page=inquiries/view inquiry&id= endpoint. The id parameter is vulnerable to this type of attack. SQL...

7.2CVSS7.2AI score0.00726EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/12/02 12:0 a.m.7 views

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Sanitization Management System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...

7.2CVSS7.3AI score0.00726EPSS
SaveExploits1References2
OSV
OSV
added 2022/10/06 6:18 p.m.7 views

CVE-2022-42250

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

7.2CVSS5.8AI score0.00877EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/10/06 6:18 p.m.5 views

CVE-2022-42250

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

7.2CVSS5.8AI score0.00877EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/10/06 12:0 a.m.8 views

Simple Cold Storage Management System SQL注入漏洞

Simple Cold Storage Management System is a web-based application used as a cold storage business website to provide their customers or potential customers with an easy-to-access platform to learn about their company. A SQL injection vulnerability exists in Simple Cold Storage Management System...

7.2CVSS8.1AI score0.00877EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/10/06 12:0 a.m.7 views

PT-2022-26334 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the /csms/admin/inquiries/view details.php?id= endpoint. The id variable is vulnerable to SQL injection attacks. Recommendations: For...

7.2CVSS7.1AI score0.00877EPSS
SaveExploits1References4
The Hacker News
The Hacker News
added 2022/07/02 4:22 a.m.46 views

TikTok Assures U.S. Lawmakers it's Working to Safeguard User Data From Chinese Staff

Following heightened worries that U.S. users' data had been accessed by TikTok engineers in China between September 2021 and January 2022, the company sought to assuage U.S. lawmakers that it's taking steps to "strengthen data security." The admission that some China-based employees can access...

6.5AI score
SaveExploits0
CNVD
CNVD
added 2022/07/01 12:0 a.m.63 views

SourceCodester Online Railway Reservation System SQL注入漏洞(CNVD-2022-53357)

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

7.2CVSS3.2AI score0.00909EPSS
SaveExploits1References1
OSV
OSV
added 2022/06/29 5:15 p.m.8 views

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

7.2CVSS5.8AI score0.00909EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/29 5:15 p.m.5 views

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

7.2CVSS5.8AI score0.00909EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/29 12:0 a.m.7 views

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or would-be passengers to view their schedules and reserve seats. Online Railway Reservation System v1.0 version contains a SQL injection vulnerability...

7.2CVSS5.9AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/14 6:15 p.m.8 views

CVE-2022-32367

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/06/14 6:15 p.m.3 views

CVE-2022-32367

Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/admin/?page=inquiries/viewinquiry&id=...

7.2CVSS5.8AI score0.00929EPSS
SaveExploits1References2
zdt
zdt
added 2022/06/02 12:0 a.m.249 views

Product Show Room Site 1.0 Cross Site Scripting Vulnerability

Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: email protected inc Vendor Homepage: https://www.sourcecodester.com/php/15370/product-show-room-site-phpoop-free-source-code.html...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/06/02 12:0 a.m.280 views

Product Show Room Site 1.0 Cross Site Scripting

Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Title: Product Show Room Site - 'Telephone' Stored Cross-Site ScriptingXSS Exploit Author: [email protected] inc Vendor Homepage:...

7.4AI score
SaveExploits0
zdt
zdt
added 2022/01/07 12:0 a.m.306 views

Online Veterinary Appointment System 1.0 - (Multiple) SQL Injection Vulnerability

Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection Exploit Author: twseptian Vendor Homepage: https://www.sourcecodester.com/php/15119/online-veterinary-appointment-system-using-phpoop-free-source-code.html Software Link:...

0.6AI score
SaveExploits0
Exploit DB
Exploit DB
added 2022/01/07 12:0 a.m.395 views

Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection

Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection Date: 05/01/20222 Exploit Author: twseptian Vendor Homepage: https://www.sourcecodester.com/php/15119/online-veterinary-appointment-system-using-phpoop-free-source-code.html Software Link:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
added 2022/01/07 12:0 a.m.313 views

Online Veterinary Appointment System 1.0 SQL Injection

Exploit Title: Online Veterinary Appointment System 1.0 - 'Multiple' SQL Injection Date: 05/01/20222 Exploit Author: twseptian Vendor Homepage: https://www.sourcecodester.com/php/15119/online-veterinary-appointment-system-using-phpoop-free-source-code.html Software Link:...

0.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/05/19 12:0 a.m.12 views

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Inquiries sub-component of the Oracle Subledger Accounting component in the Oracle E-Business Suite automation system is related to code errors. Exploiting this vulnerability may allow a malicious actor, operating remotely, to gain unauthorized access to the device throug...

8.5CVSS6.9AI score0.00931EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/04/22 10:15 p.m.12 views

CVE-2021-2272

Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite component: Inquiries. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting...

8.1CVSS5.8AI score0.00931EPSS
SaveExploits0References1
Rows per page
Query Builder