Lucene search
+L

196 matches found

CNNVD
CNNVD
•added 2023/10/28 12:00 a.m.•14 views

Task Reminder System SQL Injection Vulnerability

Task Reminder System is a Task Reminder System by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Task Reminder System version 1.0, which stems from the parameter id of the file classes/Users.php?f=delete that can lead to SQL injection...

9.8CVSS7.9AI score0.00418EPSS
SaveExploits0References3
Prion
Prion
•added 2023/10/18 1:15 p.m.•22 views

Sql injection

Sourcecodester Best Courier Management System 1.0 is vulnerable to SQL Injection via the parameter id in /editbranch.php...

7.5CVSS9.7AI score0.00696EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/09/29 12:00 a.m.•11 views

OpenRapid RapidCMS SQL Injection Vulnerability

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A SQL injection vulnerability exists in OpenRapid RapidCMS version 1.3.1, which stems from an incorrect manipulation of the parameter id that can lead to sql injection...

9.8CVSS8.3AI score0.00598EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2023/09/19 11:15 p.m.•12 views

CVE-2023-40931

A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/bannermessage-ajaxhelper.php...

6.5CVSS6.1AI score0.11869EPSS
SaveExploits2References5
CNNVD
CNNVD
•added 2023/08/27 12:00 a.m.•13 views

Online Graduate Tracer System SQL注入漏洞

Online Graduate Tracer System is an online graduate tracer system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Graduate Tracer System version 1.0, which stems from a parameter id in the file sexit.php that can lead to sql injection...

9.8CVSS7.1AI score0.00743EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/08/25 12:00 a.m.•16 views

D-Link DAR-8000 操作系统命令注入漏洞

D-Link DAR-8000 is the Internet Behavior Audit Gateway from China AUO D-Link. The D-Link DAR-8000-10 version suffers from an operating system command injection vulnerability, which originates from the parameter id of the file /app/sys1.php failing to correctly filter construct command special...

9.8CVSS7.8AI score0.84689EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/07/31 12:00 a.m.•13 views

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS version 1.5 suffers from a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the parameter id of /AntSuxin.php, which can be exploited b...

9.8CVSS8.1AI score0.0062EPSS
SaveExploits0References4
OSV
OSV
•added 2023/07/20 7:15 p.m.•13 views

CVE-2023-37600

Office Suite Premium Version v10.9.1.42602 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /api?path=profile...

6.1CVSS5.7AI score0.00526EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/07/13 12:00 a.m.•15 views

AC Repair and Services System SQL注入漏洞

AC Repair and Services System is an air conditioning repair and services system by Carlo Montero Individual Developer. SourceCodester AC Repair and Services System 1.0 suffers from a SQL injection vulnerability that stems from the parameter id of the file Master.php?f=deletebook which can lead to...

9.8CVSS7.1AI score0.00541EPSS
SaveExploits0References3
OSV
OSV
•added 2023/06/05 8:15 a.m.•15 views

CVE-2023-3100

A vulnerability, which was classified as critical, has been found in IBOS 4.5.5. Affected by this issue is the function actionDel of the file ?r=dashboard/approval/del. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may be used...

9.8CVSS6.1AI score0.00739EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/17 12:00 a.m.•13 views

Sourcecodester Budget And Expense Tracker System SQL注入漏洞

Budget And Expense Tracker System is a web based application. It is used to manage your personal/small business budget and expenses. Budget and Expense Tracker System v1.0 suffers from a SQL injection vulnerability that originates from a lack of validation of the parameter id of...

8.8CVSS8.2AI score0.00734EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/28 12:00 a.m.•9 views

PT-2023-19149 · Unknown · Sourcecodester Online Dj Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online DJ Management System version 1.0 Description: A critical vulnerability was found in the SourceCodester Online DJ Management System. The issue affects an unknown functionality of the file admin/inquiries/view details.php,...

9.8CVSS7.2AI score0.00834EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2023/03/31 12:00 a.m.•10 views

Expense Tracker SQL注入漏洞

Expense Tracker is an expense tracker organized by SourceCode and Projects. Earnings and Expense Tracker App version 1.0 suffers from a SQL injection vulnerability that originates from a sql injection via parameter id...

9.8CVSS7.2AI score0.00743EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/03/30 12:00 a.m.•10 views

Air Cargo Management System SQL注入漏洞

Air Cargo Management System is an air cargo management system. A security vulnerability exists in SourceCodester Air Cargo Management System version 1.0, which is caused by an incorrect manipulation of the parameter id resulting in sql injection...

9.8CVSS5.8AI score0.00728EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/03/23 12:00 a.m.•17 views

Automatic Question Paper Generator System SQL注入漏洞

Automatic Question Paper Generator System is an automatic question paper generator system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Automatic Question Paper Generator System version 1.0, which is caused by unknown code in admin/courses/viewclass.p...

9.8CVSS7AI score0.00541EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/03/09 12:00 a.m.•12 views

SourceCodester Friendly Island Pizza Website and Ordering System SQL注入漏洞

SourceCodester Friendly Island Pizza Website and Ordering System is the Island Pizza website and ordering system. A SQL injection vulnerability exists in SourceCodester Friendly Island Pizza Website and Ordering System version 1.0 due to an unknown function in the file deleteorder.php in the...

9.8CVSS7AI score0.00791EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/02/18 12:00 a.m.•17 views

Auto Dealer Management System SQL注入漏洞

Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Auto Dealer Management System version 1.0, which is caused by an incorrect manipulation of the parameter id that results in an sql injection...

8.8CVSS5.9AI score0.01635EPSS
SaveExploits5References6
GithubExploit
GithubExploit
•added 2023/02/16 4:41 p.m.•10 views

CVE

CMS source code url: https://www.sourcecodester.com/php/16166/on...

8.7AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/02/06 12:00 a.m.•13 views

Canteen Management System SQL注入漏洞

Canteen Management System is a canteen management system. version 1.0 of Canteen Management System is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements by parameter id. An attacker could use this vulnerability to execute illegal SQL commands to...

8.1CVSS7.7AI score0.00717EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/01/28 12:00 a.m.•11 views

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect manipulation of the parameter id that can lead to sql...

8.8CVSS7.1AI score0.00717EPSS
SaveExploits1References4
Rows per page
Query Builder