Lucene search
+L

2583 matches found

Prion
Prion
•added 2023/12/31 9:15 a.m.•39 views

Sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

5.8CVSS7.6AI score0.00743EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/31 8:48 a.m.•53 views

CVE-2023-7130 code-projects College Notes Gallery login.php sql injection

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

6.3CVSS9.2AI score0.00743EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/31 8:48 a.m.•70 views

CVE-2023-7130

The CVE-2023-7130 entry concerns code-projects College Notes Gallery 2.0 where an SQL injection affects an unknown functionality in login.php via the manipulated user parameter. Multiple connected sources confirm a SQLi vulnerability with public exploit availability and classify it as critical. T...

8.8CVSS6.5AI score0.00743EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/31 12:00 a.m.•5 views

CVE-2023-7130: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects College Notes Gallery 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument user leads to sql injection. The exploit has been disclosed to the public and ma...

8.8CVSS6.5AI score0.00743EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/12/31 12:00 a.m.•32 views

College Notes Gallery SQL Injection Vulnerability

College Notes Gallery is a personal blog. code-projects College Notes Gallery version 2.0 suffers from a SQL injection vulnerability that stems from the parameter user in the file login.php that causes SQL injection...

8.8CVSS6.9AI score0.00743EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/31 12:00 a.m.•6 views

CVE-2023-7188: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Shipping 100 Fahuo100 up to 1.1. Affected is an unknown function of the file member/login.php. The manipulation of the argument Mpwd leads to sql injection. The complexity of an attack is rather high. The exploitability is told to be...

8.1CVSS5.4AI score0.00537EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2023/12/26 2:00 a.m.•52 views

CVE-2023-7110 code-projects Library Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit ha...

7.5CVSS7.7AI score0.00961EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2023/12/26 1:31 a.m.•25 views

CVE-2023-7109 code-projects Library Management System login.php sql injection

A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7AI score0.00974EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/12/26 1:31 a.m.•56 views

CVE-2023-7109 code-projects Library Management System login.php sql injection

A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS7.8AI score0.00974EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•5 views

CVE-2023-7110: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Library Management System 2.0. This issue affects some unknown processing of the file login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely. The exploit ha...

9.8CVSS7AI score0.00961EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•6 views

CVE-2023-7109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Library Management System 2.0. This vulnerability affects unknown code of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7AI score0.00974EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/12/21 11:21 p.m.•30 views

CVE-2023-49688 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/21 11:21 p.m.•58 views

CVE-2023-49688 Job Portal v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00671EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/21 9:15 p.m.•28 views

CVE-2023-48685

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS0.00671EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/21 9:00 p.m.•41 views

CVE-2023-48720 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS10AI score0.00671EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•5 views

CVE-2023-48685: Improper Neutralization of Special Elements used in an SQL Command

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•7 views

CVE-2023-48720: Improper Neutralization of Special Elements used in an SQL Command

Student Result Management System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'password' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•6 views

CVE-2023-49688: Improper Neutralization of Special Elements used in an SQL Command

Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtUser' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS8.2AI score0.00671EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/11 12:00 a.m.•9 views

CVE-2023-6659: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Web-Based Student Clearance System 1.0. This issue affects some unknown processing of the file /libsystem/login.php. The manipulation of the argument student leads to sql injection. The attack may be initiated remotely...

7.5CVSS6.5AI score0.00632EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/10 11:15 a.m.•36 views

CVE-2023-6650

A vulnerability was found in SourceCodester Simple Invoice Generator System 1.0 and classified as problematic. This issue affects some unknown processing of the file login.php. The manipulation of the argument cashier leads to cross site scripting. The attack may be initiated remotely. The exploi...

6.1CVSS0.00751EPSS
SaveExploits1References3
Rows per page
Query Builder