Lucene search
+L

152 matches found

Prion
Prion
•added 2023/03/31 8:15 p.m.•24 views

Sql injection

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

6.5CVSS9.8AI score0.00743EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/03/31 8:00 p.m.•54 views

CVE-2023-1785 SourceCodester Earnings and Expense Tracker App manage_user.php sql injection

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

6.5CVSS10AI score0.00743EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/31 12:00 a.m.•2 views

CVE-2023-1785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Earnings and Expense Tracker App 1.0. It has been classified as critical. Affected is an unknown function of the file manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

9.8CVSS5.6AI score0.00743EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/30 12:00 a.m.•4 views

CVE-2023-1740: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been classified as critical. Affected is an unknown function of the file admin/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible...

9.8CVSS5.5AI score0.00728EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/17 12:00 a.m.•1 views

CVE-2023-1440: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function of the file users/user/manageuser.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. I...

8.8CVSS5.5AI score0.00782EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/03/17 12:00 a.m.•17 views

SourceCodester Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which originates from a SQL injection vulnerability found in...

8.8CVSS7AI score0.00782EPSS
SaveExploits1References4
OSV
OSV
•added 2023/03/15 8:15 a.m.•19 views

CVE-2023-1407

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS6AI score0.00713EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/15 12:00 a.m.•3 views

CVE-2023-1407: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be...

7.2CVSS5.5AI score0.00713EPSS
SaveExploits1References2
OSV
OSV
•added 2023/03/09 9:15 p.m.•16 views

CVE-2023-27204

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

9.8CVSS7.3AI score0.00788EPSS
SaveExploits1References2
Prion
Prion
•added 2023/03/09 9:15 p.m.•22 views

Sql injection

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

7.5CVSS9.7AI score0.00788EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•1 views

CVE-2023-27204: Improper Neutralization of Special Elements used in an SQL Command

Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manageuser.php...

9.8CVSS5.8AI score0.00788EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•2 views

CVE-2023-27207: Improper Neutralization of Special Elements used in an SQL Command

Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

9.8CVSS5.8AI score0.00872EPSS
SaveExploits1References2
Prion
Prion
•added 2023/01/17 8:15 a.m.•24 views

Sql injection

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

7.5CVSS9.7AI score0.00915EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•3 views

CVE-2023-0332: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

9.8CVSS5.5AI score0.00915EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/13 12:00 a.m.•1 views

CVE-2022-46956: Improper Neutralization of Special Elements used in an SQL Command

Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manageuser.php...

7.2CVSS5.8AI score0.00804EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/06 12:00 a.m.•3 views

CVE-2022-40049: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manageuser.php page...

7.5CVSS5.9AI score0.00988EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/14 12:00 a.m.•2 views

CVE-2022-41536: Improper Neutralization of Special Elements used in an SQL Command

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /saccoshield/manageuser.php...

7.2CVSS7.2AI score0.00783EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/24 2:15 a.m.•21 views

Sql injection

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...

6.5CVSS7.2AI score0.01244EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/06/24 1:10 a.m.•31 views

CVE-2022-32400

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...

7.5AI score0.01244EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/24 12:00 a.m.•6 views

CVE-2022-32400: Improper Neutralization of Special Elements used in an SQL Command

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/user/manageuser.php:4...

7.2CVSS7.2AI score0.01244EPSS
SaveExploits1References2
Rows per page
Query Builder