Lucene search
+L

1514 matches found

CNNVD
CNNVD
•added 2022/11/07 12:00 a.m.•19 views

Food Ordering Management System SQL注入漏洞

Food Ordering Management System is a food ordering management system by Carlo Montero personal developer. It provides an online platform to order food from a restaurant or fast food chain. A security vulnerability exists in Food Ordering Management System v1.0, which was discovered to contain an...

7.2CVSS7.2AI score0.0086EPSS
SaveExploits1References2
OSV
OSV
•added 2022/11/01 1:15 a.m.•16 views

CVE-2022-43354

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...

7.2CVSS5.8AI score0.0086EPSS
SaveExploits1References1
NVD
NVD
•added 2022/11/01 1:15 a.m.•33 views

CVE-2022-43354

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...

7.2CVSS0.0086EPSS
SaveExploits1References1
Prion
Prion
•added 2022/11/01 1:15 a.m.•21 views

Sql injection

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

5.8CVSS7.2AI score0.0086EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/11/01 1:15 a.m.•21 views

Sql injection

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...

5.8CVSS7.2AI score0.0086EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/11/01 12:00 a.m.•15 views

Sanitization Management System SQL注入漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. Sanitization Management System v1.0 is vulnerable to a SQL injection vulnerability that was discovered via the id parameter of /admin/?page=orders/managerequest to contain a SQL injection...

7.2CVSS7.3AI score0.0086EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/01 12:00 a.m.•10 views

CVE-2022-43354: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/managerequest...

7.2CVSS7.2AI score0.0086EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/01 12:00 a.m.•9 views

CVE-2022-43353: Improper Neutralization of Special Elements used in an SQL Command

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

7.2CVSS7.2AI score0.0086EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/10/27 12:00 a.m.•13 views

Online Medicine Ordering System 安全漏洞

Online Medicine Ordering System is an online medicine ordering system by Carlo Montero, an individual developer. A security vulnerability exists in version 1.0 of the Online Medicine Ordering System due to an unknown function in its admin/?page=orders/vieworder file that operates on the parameter...

9.8CVSS8.5AI score0.00417EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/27 12:00 a.m.•11 views

CVE-2022-3714: Improper Neutralization

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/vieworder. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-2123...

9.8CVSS7.9AI score0.00417EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•17 views

PT-2022-23834 · Unknown · Sourcecodester Online Medicine Ordering System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Medicine Ordering System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file "admin/?page=orders/view order". The manipulation of the id argument leads to SQL...

9.8CVSS9.6AI score0.00417EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2022/10/24 12:00 a.m.•28 views

WordPress Phone Orders for WooCommerce plugin <= 3.7.1 - Auth. Sensitive Data Exposure vulnerability

Auth. Sensitive Data Exposure vulnerability discovered by Lana Codes Patchstack Alliance in WordPress Phone Orders for WooCommerce plugin versions = 3.7.1. Solution Update the WordPress Phone Orders for WooCommerce plugin to the latest available version at least 3.7.2...

6.5CVSS3.9AI score0.00655EPSS
SaveExploits0Affected Software1
Code423n4
Code423n4
•added 2022/10/21 12:00 a.m.•19 views

Upgraded Q -> M from 873 [1666362235337]

Judge has assessed an item in Issue 873 as Medium risk. The relevant finding follows: Avoid payableaddress.transfer GolomTraderpayEther uses payableaddress.transfer to send native ETH. It's considered a best practice to avoid this pattern for ETH transfers, since it forwards a fixed gas stipend...

6.8AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/10/21 12:00 a.m.•14 views

The vulnerability of the D-Bus inter-process communication system, related to memory corruption after deallocation, allows a malicious actor to trigger a service failure.

The vulnerability of the D-Bus inter-process communication mechanism is related to a memory usage error that occurs after freeing memory, caused by messages with non-sequential byte orders and Unix file descriptors. Exploiting this vulnerability can allow an attacker to cause service failures...

6.8CVSS6.4AI score0.01755EPSS
SaveExploits1References12Affected Software8
NVD
NVD
•added 2022/10/12 12:15 a.m.•32 views

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

7.2CVSS0.00995EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/12 12:15 a.m.•21 views

CVE-2022-41407

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

7.2CVSS5.8AI score0.00995EPSS
SaveExploits1References1
OSV
OSV
•added 2022/10/12 12:15 a.m.•22 views

CVE-2022-41408

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

9.8CVSS5.8AI score0.00742EPSS
SaveExploits0References1
Prion
Prion
•added 2022/10/12 12:15 a.m.•29 views

Sql injection

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

7.5CVSS9.7AI score0.00742EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2022/10/12 12:15 a.m.•25 views

Sql injection

Online Pet Shop We App v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/vieworder...

5.8CVSS7.2AI score0.00995EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/10/11 12:00 a.m.•18 views

Online Pet Shop We App SQL注入漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A security vulnerability exists in version 1.0 of Online Pet Shop We App, which stems from an SQL injection issue in the id parameter of the /admin/?page=orders/vieworder location...

7.2CVSS7.2AI score0.00995EPSS
SaveExploits1References3
Rows per page
Query Builder