Lucene search
+L

210 matches found

Packet Storm
Packet Storm
•added 2023/04/06 12:00 a.m.•245 views

Intern Record System 1.0 SQL Injection

Exploit Title: Intern Record System v1.0 - SQL Injection Unauthenticated Date: 2022-06-09 Exploit Author: Hamdi Sevben Vendor Homepage: https://code-projects.org/intern-record-system-in-php-with-source-code/ Software Link:...

9.8CVSS8.2AI score0.05348EPSS
SaveExploits5
zdt
zdt
•added 2023/04/06 12:00 a.m.•290 views

Intern Record System v1.0 - SQL Injection (Unauthenticated) Vulnerability

Exploit Title: Intern Record System v1.0 - SQL Injection Unauthenticated Exploit Author: Hamdi Sevben Vendor Homepage: https://code-projects.org/intern-record-system-in-php-with-source-code/ Software Link: https://download-media.code-projects.org/2020/03/InternRecordSystemInPHPWithSourceCode.zip...

9.8CVSS8.2AI score0.05348EPSS
SaveExploits5
OSV
OSV
•added 2023/02/18 2:15 a.m.•18 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.4CVSS6.6AI score0.00806EPSS
SaveExploits1References3
NVD
NVD
•added 2023/02/18 2:15 a.m.•35 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.4CVSS5.5AI score0.00806EPSS
SaveExploits1References3
Prion
Prion
•added 2023/02/18 2:15 a.m.•27 views

Cross site scripting

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

4.9CVSS5.5AI score0.00806EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/02/18 12:00 a.m.•68 views

CVE-2022-40348

CVE-2022-40348 affects Intern Record System v1.0, vulnerable in /intern/controller.php where the name and email fields are unsafely handled, allowing stored/reflected XSS to trigger arbitrary script execution in the context of the affected site. Public references (NVD/Red Hat/CVE listings) descri...

5.4CVSS6.6AI score0.00806EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/18 12:00 a.m.•4 views

CVE-2022-40348: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.4CVSS6.6AI score0.00806EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/02/18 12:00 a.m.•14 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

6.6AI score0.00806EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/18 12:00 a.m.•51 views

CVE-2022-40348

Cross Site Scripting XSS vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters, allows attackers to execute arbitrary code...

5.7AI score0.00806EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•22 views

Intern Record System 跨站脚本漏洞

Intern Record System is an intern record system from the individual developers at Codeprojects. A security vulnerability exists in Intern Record System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code...

5.4CVSS6.6AI score0.00806EPSS
SaveExploits1References4
OSV
OSV
•added 2023/02/17 1:15 p.m.•18 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS8.7AI score0.05348EPSS
SaveExploits5References4
NVD
NVD
•added 2023/02/17 1:15 p.m.•51 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS10AI score0.05348EPSS
SaveExploits5References4
Prion
Prion
•added 2023/02/17 1:15 p.m.•25 views

Sql injection

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

7.5CVSS10AI score0.05348EPSS
SaveExploits5References4Affected Software1
Cvelist
Cvelist
•added 2023/02/17 12:00 a.m.•63 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

10AI score0.05348EPSS
SaveExploits5References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/17 12:00 a.m.•1 views

CVE-2022-40347: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

9.8CVSS8.7AI score0.05348EPSS
SaveExploits5References3
Vulnrichment
Vulnrichment
•added 2023/02/17 12:00 a.m.•8 views

CVE-2022-40347

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information...

8.7AI score0.05348EPSS
SaveExploits5References4
CVE
CVE
•added 2023/02/17 12:00 a.m.•70 views

CVE-2022-40347

CVE-2022-40347 concerns Intern Record System v1.0, exposing a critical SQL Injection in /intern/controller.php via the parameters phone , email , deptType , and name . The root cause is unsafely constructed queries that allow an attacker to access or modify data and potentially execute arbitrary ...

9.8CVSS8.7AI score0.05348EPSS
SaveExploits5References4Affected Software1
CNNVD
CNNVD
•added 2023/02/17 12:00 a.m.•19 views

Intern Record System SQL注入漏洞

Intern Record System is an intern record system from the individual developers at Codeprojects. A security vulnerability exists in Intern Record System version 1.0. An attacker can exploit this vulnerability to execute arbitrary code and obtain sensitive information...

9.8CVSS8.6AI score0.05348EPSS
SaveExploits5References7
GithubExploit
GithubExploit
•added 2023/02/16 2:29 a.m.•23 views

Exploit for Cross-site Scripting in Intern_Record_System_Project Intern_Record_System

CVE-2022-40348: Intern Record System - 'name' and 'email' Cros...

5.4CVSS6.2AI score0.00806EPSS
SaveExploits1
GithubExploit
GithubExploit
•added 2023/02/16 2:16 a.m.•20 views

Exploit for SQL Injection in Intern_Record_System_Project Intern_Record_System

CVE-2022-40347: Intern Record System - 'phone', 'email', 'dept...

9.8CVSS8.4AI score0.05348EPSS
SaveExploits5
Rows per page
Query Builder