Lucene search
+L

196 matches found

CNNVD
CNNVD
•added 2022/12/01 12:00 a.m.•18 views

Movie Ticket Booking System 安全漏洞

Movie Ticket Booking System is a movie ticket booking system by the individual developer Aman sharma. A security vulnerability exists in Movie Ticket Booking System, which stems from a problem with some unknown processing in the file editBooking.php, where manipulation of the parameter id can lea...

9.8CVSS8.2AI score0.00489EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/11/07 12:00 a.m.•11 views

PT-2022-26731 · Unknown · Online Diagnostic Lab Management System

Name of the Vulnerable Software and Affected Versions: Online Diagnostic Lab Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/odlms/classes/Users.php?f=delete test" API endpoint...

7.2CVSS7AI score0.00762EPSS
SaveExploits1References3
OSV
OSV
•added 2022/10/06 6:18 p.m.•12 views

CVE-2022-42243

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

7.2CVSS5.8AI score0.00914EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/09/23 12:00 a.m.•12 views

PT-2022-25197 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/tour/admin/update payment.php" API endpoint...

7.2CVSS7.1AI score0.01015EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/29 12:00 a.m.•35 views

PT-2022-23575 · Unknown · Library Management System

Name of the Vulnerable Software and Affected Versions: Library Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/staff/studentdetails.php" API endpoint. Recommendations: For Library...

9.8CVSS9.5AI score0.00914EPSS
SaveExploits1References4
CVE
CVE
•added 2022/08/25 8:41 p.m.•80 views

CVE-2022-36698

CVE-2022-36698 concerns the Ingredients Stock Management System v1.0, which is affected by a SQL injection vulnerability in the id parameter of /categories/view_category.php. The issue is described across multiple sources (e.g., CVE details, CNVD/CNNVD entries) as an SQLi in the /categories/view_...

8.8CVSS8.9AI score0.01045EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2022/08/18 12:00 a.m.•9 views

Student Management System SQL注入漏洞

Student Management System is a simple web-based student management software from Sk.Amir Hamza, an individual developer in Bangladesh. Student Management System suffers from a SQL injection vulnerability that stems from the operation parameter id that causes sql injection...

9.8CVSS8.5AI score0.00752EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/06/27 12:00 a.m.•13 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation. version 1.0 of Library Management System is vulnerable to SQL injection, which stems from a missing parameter id in the file /librarian/bookdetails.php validation of externally...

8.8CVSS6.1AI score0.01126EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2022/06/24 2:15 a.m.•6 views

CVE-2022-32403

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/managerecord.php:4...

8.8CVSS7.4AI score0.01261EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/05/13 12:00 a.m.•13 views

Air Cargo Management System SQL注入漏洞

Air Cargo Management System, an air cargo management system, is vulnerable to a SQL injection vulnerability in version 1.0 of Air Cargo Management System, which originates from /acms/admin/cargotypes/managecargotype.php?id= Lack of filtering and escaping of parameters can be exploited to execute...

7.2CVSS7.4AI score0.00956EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/04/08 9:15 a.m.•5 views

CVE-2022-28001

Movie Seat Reservation v1 was discovered to contain a SQL injection vulnerability at /index.php?page=reserve via the id parameter...

9.8CVSS7.3AI score0.01831EPSS
SaveExploits3References3
attackerkb
attackerkb
•added 2022/04/08 9:15 a.m.•7 views

CVE-2022-28000

Car Rental System v1.0 was discovered to contain a SQL injection vulnerability at /CarRental/booking.php via the id parameter...

8.8CVSS7.3AI score0.01542EPSS
SaveExploits3References3
NVD
NVD
•added 2022/03/01 2:15 p.m.•24 views

CVE-2022-23380

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...

8.8CVSS0.0097EPSS
SaveExploits1References1
Prion
Prion
•added 2022/03/01 2:15 p.m.•24 views

Sql injection

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...

6.5CVSS8.9AI score0.0097EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2022/03/01 1:12 p.m.•16 views

CVE-2022-23380

There is a SQL injection vulnerability in the background of taocms 3.0.2 in parameter id:action=admin&id=2&ctrl=edit...

7.8AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2022/02/03 2:15 p.m.•9 views

CVE-2021-44866

An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database...

7.5CVSS7.2AI score0.01002EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/14 2:15 p.m.•17 views

CVE-2021-45014

There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...

9.8CVSS0.0108EPSS
SaveExploits1References1
Prion
Prion
•added 2021/12/14 2:15 p.m.•19 views

Sql injection

There is an upload sql injection vulnerability in the background of taocms 3.0.2 in parameter id:action=cms&ctrl=update&id=26...

7.5CVSS9.5AI score0.0108EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/07/26 6:15 p.m.•24 views

Sql injection

In NavigateCMS version 2.9.4 and below, function in product.php is vulnerable to sql injection on parameter id through a post request, which results in arbitrary sql query execution in the backend database...

7.5CVSS9.5AI score0.02162EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2021/07/26 12:00 a.m.•11 views

NavigateCMS SQL注入漏洞

Navigate CMS is a powerful and intuitive content management system. A sql injection vulnerability exists in the id parameter in product.php in Navigate CMS 2.9.4 and earlier versions. An attacker can exploit this vulnerability to execute arbitrary sql queries in the backend database...

9.8CVSS6.1AI score0.02162EPSS
SaveExploits1References4
Rows per page
Query Builder