Lucene search
K

1444 matches found

Cvelist
Cvelist
added 2025/01/04 12:31 p.m.18 views

CVE-2025-0207 code-projects Online Shoe Store login.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Online Shoe Store 1.0. Affected by this issue is some unknown functionality of the file /function/login.php. The manipulation of the argument password leads to sql injection. The attack may be launched remotely. Th...

7.5CVSS0.00091EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/12/26 8:0 p.m.7 views

CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7AI score0.00097EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/12/26 8:0 p.m.13 views

CVE-2024-12964 1000 Projects Daily College Class Work Report Book login.php sql injection

A vulnerability was found in 1000 Projects Daily College Class Work Report Book 1.0. It has been classified as critical. This affects an unknown part of the file /login.php. The manipulation of the argument user leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS0.00097EPSS
Exploits1References5
CVE
CVE
added 2024/12/26 8:0 p.m.42 views

CVE-2024-12964

CVE-2024-12964 affects the open-source project 1000 Projects Daily College Class Work Report Book (version 1.0). The vulnerability stems from a flaw in the code path handling the user parameter in /login.php , enabling SQL injection . Reports indicate the issue is exploitable remotely and that th...

9.8CVSS7.4AI score0.00097EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/12/26 12:0 a.m.3 views

PT-2024-17835 · Unknown · 1000 Projects Daily College Class Work Report Book

Name of the Vulnerable Software and Affected Versions: 1000 Projects Daily College Class Work Report Book version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /login.php. The manipulation of the user argument leads to SQL injection. It is possible to...

9.8CVSS8.6AI score0.00097EPSS
Exploits1References11
Cvelist
Cvelist
added 2024/12/21 2:0 p.m.15 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00087EPSS
Exploits1References4
CVE
CVE
added 2024/12/21 2:0 p.m.58 views

CVE-2024-12884

CVE-2024-12884 affects Codezips E-Commerce Website 1.0. The vulnerability is an SQL injection in the login.php function triggered by manipulating the email parameter, allowing remote exploitation. Multiple connected sources corroborate the issue and describe it as critical, with exploitation disc...

9.8CVSS7.4AI score0.00087EPSS
Exploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/21 2:0 p.m.7 views

CVE-2024-12884 Codezips E-Commerce Website login.php sql injection

A vulnerability was found in Codezips E-Commerce Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS6.9AI score0.00087EPSS
Exploits1References4
NVD
NVD
added 2024/12/10 8:15 p.m.11 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...

9.8CVSS0.00218EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/12/10 12:0 a.m.2 views

PT-2024-35757 · Phpgurukul · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul's Beauty Parlour Management System version 1.1 Description: The issue concerns SQL Injection in the login.php file through the emailcont parameter. This allows for potential exploitation by injecting malicious SQL code...

9.8CVSS7.2AI score0.00218EPSS
Exploits1References6
CVE
CVE
added 2024/12/10 12:0 a.m.56 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter. Root cause: unsafely concatenated SQL in login flow with insufficient input validation. Impact: high on confidentiality, integrity, and availability (CVSS v3.1 base score 9....

9.8CVSS8.1AI score0.00218EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2024/11/28 4:15 p.m.0 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS5.8AI score0.00093EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/11/28 3:31 p.m.13 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00093EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/11/28 3:31 p.m.18 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS0.00093EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/11/28 12:0 a.m.2 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is a Code-Projects open source car rental software. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter uname in the file /login.php that causes SQL injection...

9.8CVSS8AI score0.00093EPSS
Exploits1References5
CVE
CVE
added 2024/11/15 7:31 p.m.47 views

CVE-2024-11256

CVE-2024-11256 details (NORMAL) : Affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is a SQL injection in the login.php flow caused by unsafely handling the username parameter, enabling remote abuse. Descriptions consistently classify this as critical with potential rem...

9.8CVSS7.7AI score0.00197EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/14 12:0 a.m.2 views

PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...

9.8CVSS8.4AI score0.00099EPSS
Exploits1References5
CVE
CVE
added 2024/11/12 2:0 a.m.48 views

CVE-2024-11099

CVE-2024-11099 affects code-projects Job Recruitment 1.0, exploiting an SQL injection in the /login.php page via the email parameter. The vulnerability is reported as remote and has been disclosed publicly. Multiple connected documents confirm the issue and point to a code path involving user inp...

9.8CVSS7.7AI score0.00095EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.5 views

PT-2024-16760 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment versions prior to the latest release Description: A critical issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to SQL injection. The attack may be initiate...

9.8CVSS8AI score0.00095EPSS
Exploits1References20
Cvelist
Cvelist
added 2024/11/11 12:0 a.m.10 views

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

0.00436EPSS
Exploits0References1
Rows per page
Query Builder