Lucene search
+L

2601 matches found

Cvelist
Cvelist
•added 2023/09/26 12:00 a.m.•40 views

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

7.9AI score0.01424EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/26 12:00 a.m.•8 views

CVE-2023-43381: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

7.5CVSS7.3AI score0.01424EPSS
SaveExploits1References2
Mend
Mend
•added 2023/09/26 12:00 a.m.•7 views

CVE-2023-43381

SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php...

8.7CVSS0.01424EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/09/23 12:15 a.m.•11 views

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

9.8CVSS6.3AI score0.015EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/22 12:00 a.m.•7 views

CVE-2023-43468: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

9.8CVSS8.7AI score0.015EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/09/22 12:00 a.m.•19 views

CVE-2023-43468

SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component...

8.6AI score0.015EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/09/16 12:00 a.m.•54 views

CVE-2023-39777

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...

5.5AI score0.00446EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/16 12:00 a.m.•7 views

CVE-2023-39777: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Admin Control Panel of vBulletin 5.7.5 and 6.0.0 allows attackers to execute arbitrary web scripts or HTML via the /login.php?do=login url parameter...

5.4CVSS6.2AI score0.00446EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/08 1:00 p.m.•48 views

CVE-2023-4219 SourceCodester Doctors Appointment System login.php sql injection

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. T...

7.5CVSS8.1AI score0.00771EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/08 12:00 a.m.•8 views

CVE-2023-4219: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument useremail leads to sql injection. The attack can be launched remotely. T...

7.5CVSS7AI score0.00771EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/06 12:00 a.m.•7 views

CVE-2023-4180: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is an unknown functionality of the file /vm/login.php. The manipulation of the argument useremail/userpassword leads to sql injection. The...

9.8CVSS7.1AI score0.00937EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/01 12:00 a.m.•2 views

CVE-2023-37772: Improper Neutralization of Special Elements used in an SQL Command

Online Shopping Portal Project v3.1 was discovered to contain a SQL injection vulnerability via the Email parameter at /shopping/login.php...

8.8CVSS7.8AI score0.01078EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/28 5:15 a.m.•34 views

CVE-2023-3985

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS8.2AI score0.00937EPSS
SaveExploits1References3
CVE
CVE
•added 2023/07/28 4:31 a.m.•68 views

CVE-2023-3985

CVE-2023-3985 affects SourceCodester Online Jewelry Store 1.0. The vulnerability is in the login.php file where manipulation of the username/password parameters enables SQL injection. The issue is exploitable remotely and has been publicly disclosed; multiple sources classify the entry as high/cr...

9.8CVSS8.9AI score0.00937EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/07/28 4:31 a.m.•49 views

CVE-2023-3985 SourceCodester Online Jewelry Store login.php sql injection

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has bee...

7.5CVSS10AI score0.00937EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/28 12:00 a.m.•5 views

CVE-2023-3985: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Online Jewelry Store 1.0 and classified as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has bee...

9.8CVSS7.1AI score0.00937EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/07/16 9:31 p.m.•48 views

CVE-2023-3693 SourceCodester Life Insurance Management System login.php sql injection

A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

7.5CVSS10AI score0.008EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/07/16 12:00 a.m.•25 views

PT-2023-25741 · Sourcecodester · Sourcecodester Insurance Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Life Insurance Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Life Insurance Management System. This issue affects the file login.php and is caused by the manipulation of the...

9.8CVSS7.5AI score0.008EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/16 12:00 a.m.•9 views

CVE-2023-3693: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Life Insurance Management System 1.0. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.1AI score0.008EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/06/01 5:00 a.m.•48 views

CVE-2010-10010 Stars Alliance PsychoStats login.php cross site scripting

A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/login.php. The manipulation of the argument ref leads to cross site scripting. It is possible to initiate the attack remotely. Upgrading to...

4CVSS6AI score0.00489EPSS
SaveExploits0References5
Rows per page
Query Builder