Lucene search
+L

2574 matches found

Cvelist
Cvelist
•added 2022/06/15 1:10 p.m.•45 views

CVE-2022-2086 SourceCodester Bank Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

6.3CVSS9.1AI score0.19562EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2022/06/15 1:10 p.m.•25 views

CVE-2022-2086 SourceCodester Bank Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

6.3CVSS9.1AI score0.19562EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/06/15 12:00 a.m.•3 views

PT-2022-14847

Name of the Vulnerable Software and Affected Versions SourceCodester Bank Management System version 1.0 Description A critical issue has been found in the login functionality. The manipulation of the password argument with a specific input leads to SQL injection. The attack can be launched...

8.8CVSS0.19562EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/15 12:00 a.m.•4 views

CVE-2022-2086: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep10,3,4,5 --+ leads to sql injection. The attack may be launch...

8.8CVSS7.5AI score0.19562EPSS
SaveExploits1References3
CNVD
CNVD
•added 2022/06/02 12:00 a.m.•51 views

Home Clean Services Management System SQL Injection Vulnerability

Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to a SQL injection issue in login.php. An attacker could exploit this vulnerability to obtain sensitive database information...

6.5CVSS3.1AI score0.00855EPSS
SaveExploits1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/02 12:00 a.m.•7 views

CVE-2022-31339: Improper Neutralization of Special Elements used in an SQL Command

Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/login.php...

7.2CVSS7.2AI score0.01016EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/06/01 12:00 a.m.•2 views

PT-2022-20696

Name of the Vulnerable Software and Affected Versions Simple Inventory System version 1.0 Description The issue allows for SQL Injection via the "/inventory/login.php" API endpoint. Recommendations For Simple Inventory System version 1.0, consider disabling the login functionality in...

7.2CVSS0.01016EPSS
SaveExploits1References3
Prion
Prion
•added 2022/05/24 6:15 a.m.•27 views

Sql injection

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

6.5CVSS8.9AI score0.00855EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2022/05/24 5:25 a.m.•15 views

CVE-2022-1839 Home Clean Services Management System login.php sql injection

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

6.3CVSS9.2AI score0.00855EPSS
SaveExploits1References2
CVE
CVE
•added 2022/05/24 5:25 a.m.•67 views

CVE-2022-1839

CVE-2022-1839 covers a SQL injection in Home Clean Services Management System 1.0, specifically in the login.php file. The vulnerability arises from manipulating the email parameter (example payload: admin%'//AND/ /(SELECT//5383/ /FROM//(SELECT(SLEEP(2)))JPeh)/ /AND/**/'frfq%'='frfq) which leads ...

8.8CVSS7.8AI score0.00855EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•2 views

PT-2022-14157

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical vulnerability was found in the Home Clean Services Management System, affecting the file login.php. The manipulation of the email argument with a specific input leads to...

8.8CVSS0.00855EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•2 views

PT-2022-14156

Name of the Vulnerable Software and Affected Versions Home Clean Services Management System version 1.0 Description A critical issue has been discovered, affecting an unknown part of the admin/login.php component. The manipulation of the username argument with a specific input leads to SQL...

7.2CVSS0.00999EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•6 views

CVE-2022-1838: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP5JPeh//AND//'frfq%'='frfq leads to sql...

7.2CVSS6.9AI score0.00999EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/24 12:00 a.m.•8 views

CVE-2022-1839: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'//AND//SELECT//5383//FROM//SELECTSLEEP2JPeh//AND//'frfq%'='frfq leads to sql injection. The...

8.8CVSS7.5AI score0.00855EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/05/20 6:29 p.m.•51 views

CVE-2022-28531

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

10AI score0.14582EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/20 12:00 a.m.•1 views

PT-2022-19069

Name of the Vulnerable Software and Affected Versions Sourcecodester Covid-19 Directory on Vaccination System version 1.0 Description The system is susceptible to SQL Injection attacks through the txtusername field, also known as the Username field, located in the admin/login.php endpoint. This...

9.8CVSS0.14582EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/20 12:00 a.m.•8 views

CVE-2022-28531: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Covid-19 Directory on Vaccination System1.0 is vulnerable to SQL Injection via the admin/login.php txtusername aka Username field...

9.8CVSS8.2AI score0.14582EPSS
SaveExploits1References2
Mend
Mend
•added 2022/04/28 7:35 p.m.•2 views

CVE-2022-28060

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

8.7CVSS0.01595EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/04/28 12:00 a.m.•4 views

PT-2022-18787

Name of the Vulnerable Software and Affected Versions Victor CMS version 1.0 Description The issue is related to a SQL Injection vulnerability. It can be exploited via the user name parameter to the "/includes/login.php" API endpoint. Recommendations For Victor CMS version 1.0, consider restricti...

7.5CVSS0.01595EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/28 12:00 a.m.•7 views

CVE-2022-28060: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Victor CMS v1.0, via the username parameter to /includes/login.php...

7.5CVSS7.2AI score0.01595EPSS
SaveExploits1References2
Rows per page
Query Builder