Lucene search
+L

1460 matches found

NVD
NVD
added 2024/12/10 8:15 p.m.37 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter...

9.8CVSS0.00602EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/10 12:00 a.m.15 views

PT-2024-35757 · Phpgurukul · Phpgurukul Beauty Parlour Management System

Name of the Vulnerable Software and Affected Versions: Phpgurukul's Beauty Parlour Management System version 1.1 Description: The issue concerns SQL Injection in the login.php file through the emailcont parameter. This allows for potential exploitation by injecting malicious SQL code...

9.8CVSS7.2AI score0.00602EPSS
SaveExploits1References6
CVE
CVE
added 2024/12/10 12:00 a.m.77 views

CVE-2024-53480

Phpgurukul's Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in login.php via the emailcont parameter. Root cause: unsafely concatenated SQL in login flow with insufficient input validation. Impact: high on confidentiality, integrity, and availability (CVSS v3.1 base score 9....

9.8CVSS8.1AI score0.00602EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2024/11/28 4:15 p.m.8 views

CVE-2024-11962

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

9.8CVSS5.8AI score0.00862EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/28 3:31 p.m.17 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS7.6AI score0.00862EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/28 3:31 p.m.37 views

CVE-2024-11962 code-projects Simple Car Rental System login.php sql injection

A vulnerability classified as critical was found in code-projects Simple Car Rental System 1.0. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument uname leads to sql injection. The attack can be launched remotely. The exploit has be...

7.5CVSS0.00862EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/28 12:00 a.m.9 views

Code-Projects Simple Car Rental System 注入漏洞

Code-Projects Simple Car Rental System is a Code-Projects open source car rental software. An injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter uname in the file /login.php that causes SQL injection...

9.8CVSS8AI score0.00862EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/15 7:31 p.m.56 views

CVE-2024-11256

CVE-2024-11256 details (NORMAL) : Affects 1000 Projects Portfolio Management System MCA 1.0. The vulnerability is a SQL injection in the login.php flow caused by unsafely handling the username parameter, enabling remote abuse. Descriptions consistently classify this as critical with potential rem...

9.8CVSS7.7AI score0.00707EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/14 12:00 a.m.21 views

PT-2024-34431 · Unknown · Kashipara E-Learning Management System Project

Name of the Vulnerable Software and Affected Versions: KASHIPARA E-learning Management System Project version 1.0 Description: A SQL Injection issue was found in the /login.php file of the KASHIPARA E-learning Management System Project. The issue is related to the username and password parameters...

9.8CVSS8.4AI score0.00603EPSS
SaveExploits1References5
CVE
CVE
added 2024/11/12 2:00 a.m.61 views

CVE-2024-11099

CVE-2024-11099 affects code-projects Job Recruitment 1.0, exploiting an SQL injection in the /login.php page via the email parameter. The vulnerability is reported as remote and has been disclosed publicly. Multiple connected documents confirm the issue and point to a code path involving user inp...

9.8CVSS7.7AI score0.00604EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2024/11/12 12:00 a.m.24 views

PT-2024-16760 · Unknown · Code-Projects Job Recruitment

Name of the Vulnerable Software and Affected Versions: code-projects Job Recruitment versions prior to the latest release Description: A critical issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to SQL injection. The attack may be initiate...

9.8CVSS8AI score0.00604EPSS
SaveExploits1References20
Cvelist
Cvelist
added 2024/11/11 12:00 a.m.17 views

CVE-2024-51213

Cross Site Scripting vulnerability in Online Shop Store v.1.0 allows a remote attacker to execute arbitrary code via the login.php component...

0.00353EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/11/11 12:00 a.m.9 views

Online Shop Store 安全漏洞

Online Shop Store is an online store system from Online Shop Store, Inc. A security vulnerability exists in Online Shop Store v1.0, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the login.php component...

6.1CVSS7AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/03 12:00 p.m.27 views

CVE-2024-10733 code-projects Restaurant Order System login.php sql injection

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.00652EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/03 12:00 p.m.12 views

CVE-2024-10733 code-projects Restaurant Order System login.php sql injection

A vulnerability was found in code-projects Restaurant Order System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument uid leads to sql injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7.5AI score0.00652EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/01 12:00 a.m.14 views

CVE-2024-48410

Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php...

6.5AI score0.00403EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/01 12:00 a.m.33 views

CVE-2024-48410

Cross Site Scripting vulnerability in Camtrace v.9.16.2.1 allows a remote attacker to execute arbitrary code via the login.php...

0.00403EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 12:00 a.m.64 views

CVE-2024-48410

CVE-2024-48410 affects Camtrace v9.16.2.1. The Red Hat, CIRCL, NVD and related records describe a Cross Site Scripting vulnerability in login.php that allows a remote attacker to execute arbitrary code. The core detail across sources is the vulnerability is tied to Camtrace 9.16.2.1 and is classi...

6.1CVSS7.3AI score0.00403EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/30 2:31 a.m.16 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS7.4AI score0.00797EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/10/30 2:31 a.m.48 views

CVE-2024-10509 Codezips Online Institute Management System login.php sql injection

A vulnerability, which was classified as critical, has been found in Codezips Online Institute Management System 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

7.5CVSS0.00797EPSS
SaveExploits1References4
Rows per page
Query Builder