Lucene search
+L

33617 matches found

CNNVD
CNNVD
added 2025/11/17 12:00 a.m.13 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Inventory Management System version 1.0, which originates from an incorrect manipulation of the parameter ID in the file /admin/user/index.php?view=edit, which...

9.8CVSS7.8AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.8 views

PT-2025-47208

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A SQL injection issue exists in itsourcecode Web-Based Internet Laboratory Management System version 1.0. The issue is located in an unknown functionality of...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References9
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.10 views

Code-Projects Courier Management System SQL注入漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ManagerName in the file /add-new-officer.php. An attacker can exploit this...

9.8CVSS5.9AI score0.00381EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.14 views

PT-2025-47129

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System version 1.0 that allows for SQL injection. The issue is located in the /ajax.php?action=save payment file,...

6.5CVSS7AI score0.00308EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.16 views

PT-2025-47171

Name of the Vulnerable Software and Affected Versions kashipara School Management System version 1.0 Description The software is susceptible to Cross Site Scripting XSS attacks. The issue is located in the /client user/feedback.php endpoint. An attacker could potentially inject malicious scripts...

6.1CVSS5.9AI score0.00225EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.10 views

PT-2025-47201

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A flaw exists in itsourcecode Web-Based Internet Laboratory Management System 1.0 that allows for SQL injection. The issue is located in the file...

7.5CVSS7AI score0.00415EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.10 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameters bookpub/booktitle in...

8.8CVSS7AI score0.00388EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.13 views

CampCodes Supplier Management System SQL注入漏洞

CampCodes Supplier Management System is a supplier management system from CampCodes, Inc. A SQL injection vulnerability exists in Campcodes Supplier Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /manufacturer/editunit.php, which could lead ...

8.8CVSS6.9AI score0.0031EPSS
SaveExploits1References6
CVE
CVE
added 2025/11/17 12:00 a.m.17 views

CVE-2024-44658

CVE-2024-44658 affects PHPGurukul Complaint Management System 2.0, due to a SQL Injection flaw in subcategory.php exposed through the subcategory and category parameters. The root cause is lack of input validation for externally supplied SQL statements, enabling attackers to manipulate queries an...

6.5CVSS7.6AI score0.0024EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.16 views

PT-2025-47203

Name of the Vulnerable Software and Affected Versions itsourcecode Web-Based Internet Laboratory Management System version 1.0 Description A flaw exists in itsourcecode Web-Based Internet Laboratory Management System 1.0. The issue impacts an unknown function within the /user/controller.php file...

7.5CVSS6.8AI score0.00387EPSS
SaveExploits1References7
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.20 views

CVE-2024-44654

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...

0.0024EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.11 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. Complaint Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in between-date-userreport.php, whic...

4.6CVSS6.2AI score0.00201EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/11/17 12:00 a.m.8 views

EUVD-2024-55096

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php...

6.5CVSS7.5AI score0.0024EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2025/11/17 12:00 a.m.25 views

CVE-2024-44655

PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS via the search parameter in user-search.php...

0.00225EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.15 views

PHPGurukul Small CRM 安全漏洞

Small CRM a customer relationship management system. Small CRM suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the id and adminremark parameters of quote-details.php. An attacker can exploit this vulnerability to...

6.5CVSS8.2AI score0.0024EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2025/11/17 12:00 a.m.14 views

Projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter datefrom/dateto in the...

8.8CVSS7AI score0.00351EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.22 views

PT-2025-47103

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument roll number can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

6.5CVSS7.2AI score0.00351EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/11/17 12:00 a.m.19 views

PT-2025-47134

Name of the Vulnerable Software and Affected Versions Campcodes School Fees Payment Management System version 1.0 Description A flaw exists in Campcodes School Fees Payment Management System 1.0 that allows for remote SQL injection. The issue is located in the /manage course.php file, specificall...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References9
Redos
Redos
added 2025/11/17 12:00 a.m.12 views

ROS-20251117-03

Vulnerability of the xdrtrrqmessage function of the protocol.cpp module of the Red Database Management System is related to dereferencing of a null pointer. Data" is related to dereferencing of a null pointer. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a...

7.5CVSS6.7AI score0.00551EPSS
SaveExploits0
EUVD
EUVD
added 2025/11/17 12:00 a.m.12 views

EUVD-2024-55094

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting XSS via /clientuser/feedback.php...

6.1CVSS5.7AI score0.00225EPSS
SaveExploits1References3
Rows per page
Query Builder