Lucene search
+L

2771 matches found

CNNVD
CNNVD
added 2025/12/29 12:0 a.m.8 views

BiggiDroid Simple PHP CMS SQL注入漏洞

BiggiDroid Simple PHP CMS is a content management system from BiggiDroid open source. A SQL injection vulnerability exists in BiggiDroid Simple PHP CMS version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/editsite.php, which can lead to SQL injection...

7.2CVSS5.7AI score0.00387EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.8 views

PT-2025-53803

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A security flaw exists in Refugee Food Management System version 1.0. The issue involves SQL injection stemming from the manipulation of the rfid argument within the file...

7.5CVSS7.1AI score0.00326EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/12/29 12:0 a.m.7 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file /detailtransac.php,...

9.8CVSS7.8AI score0.00326EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.8 views

PT-2025-53708

Name of the Vulnerable Software and Affected Versions code-projects Refugee Food Management System version 1.0 Description A security flaw exists in code-projects Refugee Food Management System 1.0. The issue is a SQL injection impacting an unknown function within the /home/pagenateRefugeesList.p...

9.8CVSS7.1AI score0.00333EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.13 views

PT-2025-53713

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A flaw exists in Refugee Food Management System version 1.0 that allows for remote SQL injection. The issue is located in the file /home/addusers.php. Manipulation of the a argument can le...

9.8CVSS7AI score0.00326EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.10 views

PT-2025-53687

Name of the Vulnerable Software and Affected Versions BiggiDroid Simple PHP CMS version 1.0 Description A weakness exists in BiggiDroid Simple PHP CMS 1.0. The issue is related to some unknown functionality within the /admin/editsite.php file. Manipulation of the ID parameter can lead to SQL...

5.8CVSS6.9AI score0.00387EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.7 views

PT-2025-53712

Name of the Vulnerable Software and Affected Versions code-projects Refugee Food Management System version 1.0 Description A flaw exists in code-projects Refugee Food Management System 1.0, specifically within an unknown functionality of the /home/refugeesreport.php file. Manipulation of the a...

9.8CVSS6.8AI score0.00323EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.12 views

PT-2025-53709

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A flaw exists in Refugee Food Management System 1.0 that allows for SQL injection. This occurs through manipulation of the refNo argument in a remote request to the /home/served.php file...

9.8CVSS6.9AI score0.00322EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2025/12/28 12:0 a.m.9 views

Fedora 43 : tkimg (2025-13b23a6952)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-13b23a6952 advisory. Update to 2.1.0. Update bundled libpng, libtiff, to latest versions. Built against TCL/TK 9. Fix FTBFS. Tenable has extracted the preceding...

9.8CVSS6.2AI score0.00739EPSS
SaveExploits11References14
RedhatCVE
RedhatCVE
added 2025/12/27 2:46 p.m.13 views

CVE-2025-64645

IBM Concert 1.0.0 through 2.1.0 could allow a local user to escalate their privileges due to a race condition of a symbolic link...

7.7CVSS6.5AI score0.00117EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/26 1:15 p.m.7 views

CVE-2025-1721

IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory...

7.5CVSS6.3AI score
SaveExploits0References1
EUVD
EUVD
added 2025/12/26 12:0 a.m.12 views

EUVD-2025-205435

SQL injection vulnerability in krishanmuraiji SMS v.1.0, within the /studentms/admin/edit-class-detail.php via the editid GET parameter. An attacker can trigger controlled delays using SQL SLEEP to infer database contents. Successful exploitation may lead to full database compromise, especially...

6.5CVSS7.5AI score0.00259EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/12/25 12:0 a.m.6 views

PT-2025-53388

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0 that allows for remote SQL injection. The issue is located in the file /list report.php and involves manipulation of the...

9.8CVSS7.1AI score0.0033EPSS
SaveExploits1References10
RedhatCVE
RedhatCVE
added 2025/12/24 12:32 p.m.8 views

CVE-2025-68557

Missing Authorization vulnerability in Vikas Ratudi Chakra test chakra-test allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chakra test: from n/a through = 1.0.1...

4.3CVSS5.9AI score0.00158EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/24 12:0 a.m.7 views

Code-Projects Student File Management System 代码问题漏洞

Code-Projects Student File Management System is an open source student file management system from Code-Projects. A code issue vulnerability exists in Code-Projects Student File Management System version 1.0, which stems from incorrect manipulation of the File parameter File in file/savefile.php,...

8.8CVSS6.6AI score0.00294EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.5 views

PuneethReddyHC Event Management 安全漏洞

PuneethReddyHC Event Management is an application by Puneeth Reddy H C Individual Developer. Helps users to register for events organized in university festivals with simple logic and security. A security vulnerability exists in PuneethReddyHC Event Management version 1.0, which stems from...

9.8CVSS7.7AI score0.00485EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.12 views

PT-2025-52624

Name of the Vulnerable Software and Affected Versions Refugee Food Management System version 1.0 Description A SQL injection issue exists due to manipulation of the a argument within an unknown function of the /home/home.php file. The attack can be carried out remotely. The exploit has been...

9.8CVSS7.1AI score0.00335EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.5 views

CampCodes Complete Online Beauty Parlor Management System SQL注入漏洞

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter viewid i...

9.8CVSS7.2AI score0.00332EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/12/21 12:0 a.m.6 views

CampCodes Complete Online Beauty Parlor Management System 代码注入漏洞

Complete Online Beauty Parlor Management System is an online beauty parlor management system. Complete Online Beauty Parlor Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter...

4.8CVSS5.9AI score0.00204EPSS
SaveExploits1References6
Atlassian
Atlassian
added 2025/12/19 3:18 p.m.24 views

XXE (XML External Entity Injection) in Crowd Data Center and Server

This High severity XXE XML External Entity Injection vulnerability was introduced in version 7.1.0 of Crowd Data Center and Server. This XXE XML External Entity Injection vulnerability, with a CVSS Score of 7.9, allows an authenticated attacker to access local and remote content which has high...

7.9CVSS5.5AI score0.00297EPSS
SaveExploits0
Rows per page
Query Builder