Lucene search
+L

2771 matches found

CNNVD
CNNVD
added 2022/09/22 12:0 a.m.5 views

Online Pet Shop We App SQL注入漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App v1.0, which originates from /petshop/classes/Master.php?f=deletecategory page id parameter is susceptible to SQL injection...

7.2CVSS7.3AI score0.00861EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/21 12:0 a.m.7 views

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the shortName parameter of the newTask.php component...

6.1CVSS5.9AI score0.00555EPSS
SaveExploits1References4
ATTACKERKB
ATTACKERKB
added 2022/09/19 4:15 p.m.3 views

CVE-2022-40430

The d8s-utility for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

9.8CVSS7.3AI score0.01071EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/16 3:15 p.m.5 views

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

7.2CVSS5.8AI score0.00896EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2022/09/16 8:17 a.m.4 views

Exploit for CVE-2022-37210

CVE-2022-37210 CVE-2022-37210 POC Suggested description...

8.8CVSS9AI score0.01153EPSS
SaveExploits3
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.6 views

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

7.2CVSS7.3AI score0.00896EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/14 11:15 a.m.3 views

CVE-2022-36669

Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

9.8CVSS6.9AI score0.02159EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.7 views

Garage Management System 代码问题漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System version 1.0, which stems from a lack of file upload filterin...

8.8CVSS7.1AI score0.24358EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.6 views

Garage Management System 跨站脚本漏洞

SourceCodester Garage Management System Cms-Website is a garage management system by mayurik personal developer. It helps you to manage all your vehicles, cars and motorcycles. A security vulnerability exists in Garage Management System version 1.0, which stems from a problem in the creating,...

5.4CVSS5.8AI score0.0051EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
added 2022/09/14 12:0 a.m.6 views

PT-2022-19355 · Parse-Url · Url-Parse

Name of the Vulnerable Software and Affected Versions: parse-url versions prior to 8.1.0 Description: The issue is related to Server-Side Request Forgery SSRF in the GitHub repository ionicabizau/parse-url. SSRF is a type of attack where an attacker can trick a server into making requests to...

9.1CVSS9.1AI score0.00941EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2022/09/14 12:0 a.m.7 views

PT-2022-23833 · Unknown · Alton Management System

Name of the Vulnerable Software and Affected Versions: Loan Management System version 1.0 Description: The Loan Management System has a persistent cross-site scripting issue. This means that an attacker can inject malicious scripts into the system, which will be executed by other users' browsers,...

5.4CVSS6.3AI score0.0051EPSS
SaveExploits2References6
CNNVD
CNNVD
added 2022/09/14 12:0 a.m.4 views

Hospital Information System SQL注入漏洞

Hospital Information System is a hospital information management system organized by SourceCode and Projects. A SQL injection vulnerability exists in Hospital Information System version 1.0 that originates from a remote SQL injection that allows bypassing authentication...

9.8CVSS7.3AI score0.02159EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
added 2022/09/13 12:0 a.m.5 views

PT-2022-24494 · Unknown · Hospital Management System

Name of the Vulnerable Software and Affected Versions: Hospital Management System version 1.0 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the Username and Password parameters on the Login page, specifically the '/login' A...

9.8CVSS9.7AI score0.04822EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/13 12:0 a.m.5 views

CuppaCMS 安全漏洞

CuppaCMS is a content management system CMS. A security vulnerability exists in CuppaCMS version 1.0, which stems from the vulnerability of the component cuppa/api/index.php to LFI attacks...

6.5CVSS6.4AI score0.02646EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/12 5:15 p.m.5 views

CVE-2022-3178

Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV...

7.8CVSS7.2AI score0.00403EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/12 12:0 a.m.6 views

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

7.5CVSS8AI score0.00815EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/12 12:0 a.m.5 views

InventoryManagementSystem SQL注入漏洞

InventoryManagementSystem is an inventory management system by Sajan Rajbhandari, an individual developer. It provides an easy way to track products, suppliers, customers, and purchasing and sales information. A security vulnerability exists in InventoryManagementSystem version 1.0, which...

7.5CVSS8AI score0.00815EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.3 views

JFinal SQL注入漏洞

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /admin/image/list SQL injection vulnerability...

7.2CVSS7.2AI score0.00907EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/09/09 12:0 a.m.7 views

PT-2022-24333 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinal CMS version 5.1.0 Description: The issue is related to SQL Injection, which can be exploited via the "/admin/imagealbum/list" API endpoint. This allows for potential unauthorized access to sensitive data. Recommendations: For JFinal CM...

7.2CVSS6.9AI score0.00907EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/09 12:0 a.m.6 views

JFinal SQL注入漏洞

JFinal is a Java-based WEB + ORM open source framework. JFinal CMS version 5.1.0 has a security vulnerability , the vulnerability stems from /system/role/list SQL injection vulnerability...

7.2CVSS7.2AI score0.00907EPSS
SaveExploits1References2
Rows per page
Query Builder