Lucene search
+L

2584 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/17 12:00 a.m.•4 views

CVE-2022-39180: Improper Neutralization of Special Elements used in an SQL Command

College Management System v1.0 - SQL Injection SQLi. By inserting SQL commands to the username and password fields in the login.php page...

9.8CVSS5.8AI score0.00642EPSS
SaveExploits0References3
Prion
Prion
•added 2022/11/16 3:15 p.m.•27 views

Sql injection

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

7.5CVSS9.8AI score0.00789EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/16 12:00 a.m.•9 views

CVE-2022-43135: Improper Neutralization of Special Elements used in an SQL Command

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

9.8CVSS5.8AI score0.00789EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/16 12:00 a.m.•8 views

CVE-2022-43262: Improper Neutralization of Special Elements used in an SQL Command

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

9.8CVSS5.8AI score0.00789EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/11/16 12:00 a.m.•40 views

CVE-2022-43262

Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php...

10AI score0.00789EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/10/18 11:15 a.m.•20 views

CVE-2022-3579

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...

9.8CVSS5.7AI score0.00821EPSS
SaveExploits1References2
CVE
CVE
•added 2022/10/18 12:00 a.m.•84 views

CVE-2022-3583

SourceCodester Canteen Management System 1.0 is affected; the login.php file’s business parameter is vulnerable to SQL injection, exploitable remotely. The vulnerability stems from unknown code paths combining the business input, enabling data exposure/modification. Multiple connected sources (NV...

9.8CVSS8.9AI score0.00867EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/18 12:00 a.m.•11 views

CVE-2022-3579: Improper Neutralization

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated...

9.8CVSS7.9AI score0.00821EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/18 12:00 a.m.•8 views

CVE-2022-3583: Improper Neutralization

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS8AI score0.00867EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/10/18 12:00 a.m.•44 views

CVE-2022-3583 SourceCodester Canteen Management System login.php sql injection

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.3CVSS10AI score0.00867EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/10/18 12:00 a.m.•24 views

CVE-2022-3583 SourceCodester Canteen Management System login.php sql injection

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.3CVSS7.5AI score0.00867EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/27 12:00 a.m.•7 views

CVE-2021-41433: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability exists in version 1.0 of the Resumes Management and Job Application Website application login form by EGavilan Media that allows authentication bypass through login.php...

9.8CVSS8.2AI score0.0114EPSS
SaveExploits3References3
CVE
CVE
•added 2022/09/07 7:50 p.m.•91 views

CVE-2022-3130

CVE-2022-3130 affects codeprojects Online Driving School, with a SQL injection in an unknown part of /login.php triggered by manipulating the username parameter. The vulnerability is exploitable remotely, and multiple sources confirm public disclosure of exploits/PoCs. Affected versions are not s...

9.8CVSS8.9AI score0.00967EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/09/07 7:50 p.m.•11 views

CVE-2022-3130 codeprojects Online Driving School login.php sql injection

A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

7.3CVSS7.3AI score0.00967EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/07 12:00 a.m.•9 views

CVE-2022-3130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

9.8CVSS8AI score0.00967EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/08/31 8:15 p.m.•21 views

CVE-2022-36581

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

7.5CVSS5.8AI score0.00928EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/31 12:00 a.m.•9 views

CVE-2022-36581: Improper Neutralization of Special Elements used in an SQL Command

Online Ordering System v2.3.2 was discovered to contain a SQL injection vulnerability via the useremail parameter at /admin/login.php...

7.5CVSS7.2AI score0.00928EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/08/22 6:18 p.m.•10 views

CVE-2022-2842 SourceCodester Gym Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

7.3CVSS7.4AI score0.00859EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/08/22 6:18 p.m.•40 views

CVE-2022-2842 SourceCodester Gym Management System login.php sql injection

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

7.3CVSS10AI score0.00859EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•7 views

CVE-2022-2842: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

9.8CVSS8AI score0.00859EPSS
SaveExploits1References2
Rows per page
Query Builder