Lucene search
+L

2958 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/19 12:00 a.m.•7 views

CVE-2024-12784: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in itsourcecode Vehicle Management System 1.0. It has been classified as critical. Affected is an unknown function of the file editbill.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.5AI score0.00579EPSS
SaveExploits1References1
OSV
OSV
•added 2024/12/04 5:15 p.m.•17 views

CVE-2024-52676

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

5.4CVSS5.8AI score0.00268EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/04 12:00 a.m.•20 views

CVE-2024-52676

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

6.1AI score0.00268EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/04 12:00 a.m.•16 views

Itsourcecode Online Discussion Forum Project 安全漏洞

Itsourcecode Online Discussion Forum Project is an itsourcecode open source online forum project. A security vulnerability exists in itsourcecode Online Discussion Forum Project version v.1.0.0, which stems from vulnerability to cross-site scripting XSS attacks...

5.4CVSS5.9AI score0.00268EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•7 views

CVE-2024-52676: Improper Neutralization of Input During Web Page Generation

Itsourcecode Online Discussion Forum Project v.1.0.0 is vulnerable to Cross Site Scripting XSS via /bccforum/members/home.php...

5.4CVSS5.7AI score0.00268EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/04 12:00 a.m.•6 views

PT-2024-35409

Name of the Vulnerable Software and Affected Versions Itsourcecode Online Discussion Forum Project version 1.0.0 Description The issue is related to Cross Site Scripting XSS via the "/bcc forum/members/home.php" API endpoint. This allows for potential malicious script injection. No information is...

5.4CVSS0.00268EPSS
SaveExploits1References7
NVD
NVD
•added 2024/11/23 12:15 p.m.•45 views

CVE-2024-11631

A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /expedit.php. The manipulation of the argument expcat leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS0.00679EPSS
SaveExploits1References5
CVE
CVE
•added 2024/11/23 11:31 a.m.•77 views

CVE-2024-11631

Concretely, CVE-2024-11631 affects itsourcecode Tailoring Management System 1.0. The vulnerability resides in the file /expedit.php where the expcat argument is unsafely processed, leading to SQL injection. This is a remote-accessible issue with potential high impact on confidentiality, integrity...

9.8CVSS7.1AI score0.00679EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/11/23 12:00 a.m.•14 views

PT-2024-17146 · Unknown · Itsourcecode Tailoring Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue affects the processing of the file "/expedit.php". The manipulation of the expcat argument leads to SQL injection. The attack can be initiated remotely...

9.8CVSS8.1AI score0.00679EPSS
SaveExploits1References8
NVD
NVD
•added 2024/11/21 1:15 p.m.•28 views

CVE-2024-11589

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /expcatedit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS0.00691EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/11/21 1:00 p.m.•13 views

CVE-2024-11589 itsourcecode Tailoring Management System expcatedit.php sql injection

A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /expcatedit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit ha...

6.5CVSS7.4AI score0.00691EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/11/21 12:00 a.m.•12 views

itsourcecode Tailoring Management System 安全漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. A security vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

8.8CVSS6.7AI score0.00691EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/21 12:00 a.m.•8 views

PT-2024-17121 · Unknown · Itsourcecode Tailoring Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Tailoring Management System version 1.0 Description: A critical issue was found in the itsourcecode Tailoring Management System. The problem affects an unknown functionality of the file /expcatedit.php. The manipulation of the id...

8.8CVSS8AI score0.00691EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2024/11/14 12:00 a.m.•15 views

itsourcecode Agri-Trading Online Shopping System 安全漏洞

itsourcecode Agri-Trading Online Shopping System is an open source online shopping system by itsourcecode. A security vulnerability exists in version 1.0 of itsourcecode Agri-Trading Online Shopping System. An attacker can exploit this vulnerability to manipulate the quant parameter when adding...

7.5CVSS6.7AI score0.00862EPSS
SaveExploits1References2
NVD
NVD
•added 2024/11/13 4:15 p.m.•39 views

CVE-2024-50970

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.8CVSS0.00522EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/13 4:15 p.m.•57 views

CVE-2024-50971

A SQL injection vulnerability in print.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the mapid parameter...

7.2CVSS0.00742EPSS
SaveExploits0References2
NVD
NVD
•added 2024/11/13 4:15 p.m.•43 views

CVE-2024-50972

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter...

7.2CVSS0.00742EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/13 4:15 p.m.•13 views

CVE-2024-50972

A SQL injection vulnerability in printtool.php of Itsourcecode Construction Management System 1.0 allows remote attackers to execute arbitrary SQL commands via the borrowid parameter...

7.2CVSS6.1AI score0.00742EPSS
SaveExploits0References2
OSV
OSV
•added 2024/11/13 4:15 p.m.•11 views

CVE-2024-50970

A SQL injection vulnerability in orderview1.php of Itsourcecode Online Furniture Shopping Project 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

8.8CVSS6.1AI score0.00522EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•15 views

itsourcecode Construction Management System SQL注入漏洞

itsourcecode Construction Management System is a construction management system from itsourcecode, Inc. A security vulnerability exists in itsourcecode Construction Management System version 1.0, which stems from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL...

7.2CVSS8.5AI score0.00742EPSS
SaveExploits0References3
Rows per page
Query Builder