Lucene search
K

2155 matches found

Vulnrichment
Vulnrichment
added 2024/06/27 12:31 p.m.16 views

CVE-2024-6371 itsourcecode Pool of Bethesda Online Reservation System controller.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Pool of Bethesda Online Reservation System 1.0. Affected by this issue is some unknown functionality of the file controller.php. The manipulation of the argument rmtypeid leads to sql injection. The attack may be...

7.5CVSS7.5AI score0.00739EPSS
Exploits1References4
CVE
CVE
added 2024/06/27 12:31 p.m.47 views

CVE-2024-6371

CVE-2024-6371 affects the Pool of Bethesda Online Reservation System v1.0. The vulnerability is a SQL injection in the rmtype_id parameter of controller.php, exploitable remotely. Multiple sources describe it as critical/high-impact, with the potential for unauthorized data exposure or manipulati...

9.8CVSS7.7AI score0.00739EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/27 12:0 a.m.2 views

PT-2024-37577 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Food Ordering System version 1.0 Description: A critical issue has been found in the itsourcecode Online Food Ordering System, affecting the file /addproduct.php. The manipulation of the photo argument leads to unrestricte...

9.8CVSS7.1AI score0.00867EPSS
Exploits1References8
NVD
NVD
added 2024/06/25 5:15 p.m.12 views

CVE-2024-6308

A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS0.00682EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/06/25 5:0 p.m.20 views

CVE-2024-6308 itsourcecode Simple Online Hotel Reservation System index.php sql injection

A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

7.5CVSS0.00682EPSS
Exploits1References4
OSV
OSV
added 2024/06/22 2:15 p.m.2 views

CVE-2024-6253

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS5.7AI score0.00648EPSS
Exploits1References4
NVD
NVD
added 2024/06/22 2:15 p.m.13 views

CVE-2024-6253

A vulnerability was found in itsourcecode Online Food Ordering System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /purchase.php. The manipulation of the argument customer leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS0.00648EPSS
Exploits1References4
CVE
CVE
added 2024/06/22 2:0 p.m.58 views

CVE-2024-6253

The CVE-2024-6253 entry concerns itsourcecode Online Food Ordering System 1.0, where the /purchase.php endpoint is vulnerable via manipulation of the customer parameter, leading to SQL injection. The issue is exploitable remotely, with publicly disclosed exploits. Affected component is the /purch...

9.8CVSS7.7AI score0.00648EPSS
Exploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/06/22 12:0 a.m.4 views

PT-2024-37485 · Unknown · Sourcecodester Online Food Ordering System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Food Ordering System version 1.0 Description: A critical issue was found in the itsourcecode Online Food Ordering System, affecting some unknown functionality of the file /purchase.php. The manipulation of the customer...

9.8CVSS8AI score0.00648EPSS
Exploits1References10
Cvelist
Cvelist
added 2024/06/21 2:0 a.m.20 views

CVE-2024-6218 itsourcecode Vehicle Management System busprofile.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. Affected by this issue is some unknown functionality of the file busprofile.php. The manipulation of the argument busid leads to sql injection. The attack may be launched remotely. The...

7.5CVSS0.00739EPSS
Exploits1References4
NVD
NVD
added 2024/06/20 4:15 p.m.15 views

CVE-2024-6193

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS0.00532EPSS
Exploits1References4
NVD
NVD
added 2024/06/20 4:15 p.m.10 views

CVE-2024-6196

A vulnerability was found in itsourcecode Banking Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file adminclass.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit h...

9.8CVSS0.00561EPSS
Exploits1References4
CVE
CVE
added 2024/06/20 4:0 p.m.57 views

CVE-2024-6196

Evidence across multiple connected documents confirms CVE-2024-6196 affects itsourcecode Banking Management System 1.0, with a SQL injection in the admin_class.php file triggered via the username parameter. The vulnerability is exploitable remotely and was disclosed publicly. Several sources labe...

9.8CVSS7.7AI score0.00561EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/20 4:0 p.m.18 views

CVE-2024-6195 itsourcecode Tailoring Management System orderadd.php sql injection

A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file orderadd.php. The manipulation of the argument customer leads to sql injection. The attack can be launched remotely. Th...

6.5CVSS0.00447EPSS
Exploits1References4
CVE
CVE
added 2024/06/20 4:0 p.m.46 views

CVE-2024-6195

Tailoring Management System 1.0 (itsourcecode) contains a vulnerability in the file orderadd.php where the argument customer can be manipulated to perform SQL injection. The flaw is exploitable remotely and, per sources, the exploit has been disclosed publicly. Multiple sources (including CVE-202...

9.8CVSS7.1AI score0.00447EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2024/06/20 3:31 p.m.15 views

CVE-2024-6194 itsourcecode Tailoring Management System editmeasurement.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editmeasurement.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS0.00447EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/20 3:31 p.m.11 views

CVE-2024-6194 itsourcecode Tailoring Management System editmeasurement.php sql injection

A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file editmeasurement.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has...

6.5CVSS7.4AI score0.00447EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/06/20 3:31 p.m.10 views

CVE-2024-6193 itsourcecode Vehicle Management System driverprofile.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS7.4AI score0.00532EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/06/20 3:31 p.m.16 views

CVE-2024-6193 itsourcecode Vehicle Management System driverprofile.php sql injection

A vulnerability, which was classified as critical, has been found in itsourcecode Vehicle Management System 1.0. This issue affects some unknown processing of the file driverprofile.php. The manipulation of the argument driverid leads to sql injection. The attack may be initiated remotely. The...

7.5CVSS0.00532EPSS
Exploits1References4
CVE
CVE
added 2024/06/20 3:31 p.m.47 views

CVE-2024-6193

CVE-2024-6193 affects itsourcecode Vehicle Management System 1.0, specifically the driverprofile.php file where the driverid parameter enables SQL injection. The vulnerability is exploitable over the network with no user interaction and has been disclosed publicly. Root cause: unsafely constructe...

9.8CVSS7.7AI score0.00532EPSS
Exploits1References4Affected Software1
Rows per page
Query Builder