Lucene search
+L

665 matches found

CNNVD
CNNVD
added 2024/07/30 12:00 a.m.10 views

WordPress plugin CZ Loan Management 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

9.1CVSS7.1AI score0.01958EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2024/07/01 12:00 a.m.18 views

The vulnerability of the login.php file of the Loan Management System allows a perpetrator to execute arbitrary SQL code.

The vulnerability of the login.php file of the Loan Management System is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary SQL code through the username parameter...

7.5CVSS7.7AI score0.00614EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/06/20 3:15 p.m.5 views

CVE-2024-6192

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS5.7AI score0.00614EPSS
SaveExploits1References4
NVD
NVD
added 2024/06/20 3:15 p.m.26 views

CVE-2024-6192

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

9.8CVSS0.00614EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/06/20 3:00 p.m.41 views

CVE-2024-6192 itsourcecode Loan Management System Login Page login.php sql injection

A vulnerability classified as critical was found in itsourcecode Loan Management System 1.0. This vulnerability affects unknown code of the file login.php of the component Login Page. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The explo...

7.5CVSS0.00614EPSS
SaveExploits1References4
CVE
CVE
added 2024/06/20 3:00 p.m.68 views

CVE-2024-6192

CVE-2024-6192 affects itsourcecode Loan Management System 1.0, with an SQL injection in the login.php component of the Login Page triggered by manipulating the username parameter. Exploitation is network-visible and remote; multiple sources confirm public disclosure. Practical impact is high (una...

9.8CVSS7.8AI score0.00614EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2024/06/20 12:00 a.m.9 views

Loan Management System SQL Injection Vulnerability

Loan Management System is a loan management system by razormist Personal Developer. A SQL injection vulnerability exists in itsourcecode Loan Management System version 1.0, which is caused by an unknown function in login.php in the component Login, which leads to SQL injection via the parameter...

9.8CVSS7.9AI score0.00614EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/06/18 12:00 a.m.12 views

PT-2024-4406 · Unknown · Alton Management System

Name of the Vulnerable Software and Affected Versions: Loan Management System version 1.0 Description: A critical vulnerability was found in the Loan Management System, affecting the file login.php of the Login Page component. The manipulation of the username argument leads to SQL injection. The...

9.8CVSS8.1AI score0.00614EPSS
SaveExploits1References10
The Hacker News
The Hacker News
added 2024/04/13 2:25 p.m.50 views

Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

A former security engineer has been sentenced to three years in prison in the U.S. for charges relating to hacking two decentralized cryptocurrency exchanges in July 2022 and stealing over $12.3 million. Shakeeb Ahmed, the defendant in question, pled guilty to one count of computer fraud in...

7.3AI score
SaveExploits0
NVD
NVD
added 2024/04/12 1:15 p.m.17 views

CVE-2024-31263

Cross-Site Request Forgery CSRF vulnerability in aerin Loan Repayment Calculator and Application Form.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.4...

5.4CVSS5.5AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/12 12:49 p.m.68 views

CVE-2024-31263

CVE-2024-31263 is a CSRF vulnerability in the WordPress plugin Loan Repayment Calculator and Application Form (aka quick-interest-slider), affecting versions up to 2.9.4. The connected documents provide the vulnerability and affected version but do not specify exploit details, affected environmen...

5.4CVSS8.5AI score0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/04/12 12:49 p.m.16 views

CVE-2024-31263 WordPress Loan Repayment Calculator and Application Form plugin <= 2.9.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in aerin Loan Repayment Calculator and Application Form.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.4...

5.4CVSS7AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/04/12 12:49 p.m.28 views

CVE-2024-31263 WordPress Loan Repayment Calculator and Application Form plugin <= 2.9.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in aerin Loan Repayment Calculator and Application Form.This issue affects Loan Repayment Calculator and Application Form: from n/a through 2.9.4...

5.4CVSS5.7AI score0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/12 12:00 a.m.9 views

WordPress Plugin Loan Repayment Calculator and Application Form 跨站请求伪造漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site request forgery vulnerability exists ...

5.4CVSS8.4AI score0.00197EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/12 12:00 a.m.11 views

PT-2024-23907 · Unknown · Aerin Loan Repayment Calculator/Application Form

Name of the Vulnerable Software and Affected Versions: aerin Loan Repayment Calculator and Application Form versions 2.9.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...

5.4CVSS9.3AI score0.00197EPSS
SaveExploits0References4
OSV
OSV
added 2024/04/11 4:15 p.m.8 views

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

9.8CVSS5.8AI score0.00594EPSS
SaveExploits1References1
NVD
NVD
added 2024/04/11 4:15 p.m.19 views

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

9.8CVSS7.6AI score0.00594EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/04/11 12:00 a.m.27 views

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

7.9AI score0.00594EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/04/11 12:00 a.m.9 views

Loan Management System 安全漏洞

Loan Management System is a loan management system by razormist individual developer. A security vulnerability exists in Sourcecodester Loan Management System v1.0, which stems from vulnerability to SQL injection attacks...

9.8CVSS7.8AI score0.00594EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/04/11 12:00 a.m.14 views

CVE-2024-31678

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file...

8AI score0.00594EPSS
SaveExploits1References1
Rows per page
Query Builder