Lucene search
K

982 matches found

Cvelist
Cvelist
added 2024/08/25 10:31 p.m.24 views

CVE-2024-8152 SourceCodester QR Code Bookmark System Parameter add-bookmark.php cross site scripting

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the argument name/url leads to cross site scripting...

5.3CVSS0.0014EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/08/25 10:31 p.m.9 views

CVE-2024-8152 SourceCodester QR Code Bookmark System Parameter add-bookmark.php cross site scripting

A vulnerability was found in SourceCodester QR Code Bookmark System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /endpoint/add-bookmark.php of the component Parameter Handler. The manipulation of the argument name/url leads to cross site scripting...

5.3CVSS6.7AI score0.0014EPSS
Exploits1References5
NVD
NVD
added 2024/08/25 1:15 a.m.9 views

CVE-2024-8138

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql...

9.8CVSS0.00104EPSS
Exploits1References5
Cvelist
Cvelist
added 2024/08/25 12:0 a.m.16 views

CVE-2024-8138 code-projects Pharmacy Management System Parameter index.php editManager sql injection

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql...

6.5CVSS0.00104EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/08/25 12:0 a.m.9 views

CVE-2024-8138 code-projects Pharmacy Management System Parameter index.php editManager sql injection

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Affected is the function editManager of the file /index.php?action=editManager of the component Parameter Handler. The manipulation of the argument id as part of String leads to sql...

6.5CVSS7.6AI score0.00104EPSS
Exploits1References5
OSV
OSV
added 2024/08/15 3:15 a.m.2 views

CVE-2024-7812

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.4CVSS3.9AI score0.001EPSS
Exploits1References4
NVD
NVD
added 2024/08/15 3:15 a.m.12 views

CVE-2024-7812

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.4CVSS0.001EPSS
Exploits1References4
Cvelist
Cvelist
added 2024/08/15 3:0 a.m.14 views

CVE-2024-7812 SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.3CVSS0.001EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2024/08/15 3:0 a.m.13 views

CVE-2024-7812 SourceCodester Best House Rental Management System POST Parameter ajax.php cross site scripting

A vulnerability classified as problematic was found in SourceCodester Best House Rental Management System 1.0. This vulnerability affects unknown code of the file /rental0/rental/ajax.php?action=savetenant of the component POST Parameter Handler. The manipulation of the argument lastname leads to...

5.3CVSS6.6AI score0.001EPSS
Exploits1References4
OSV
OSV
added 2024/07/29 7:15 a.m.1 views

CVE-2024-7188

A vulnerability was found in Bylancer Quicklancer 2.4. It has been rated as critical. This issue affects some unknown processing of the file /listing of the component GET Parameter Handler. The manipulation of the argument range2 leads to sql injection. The attack may be initiated remotely. The...

9.8CVSS6.8AI score0.8622EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/07/29 12:0 a.m.1 views

Bylancer Quicklancer SQL注入漏洞

Bylancer Quicklancer is a freelance platform from Bylancer, Inc. A SQL injection vulnerability exists in Bylancer Quicklancer version 2.4, which stems from the parameter range2 of the component GET Parameter Handler can lead to SQL injection...

9.8CVSS7.9AI score0.8622EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2024/03/20 2:0 a.m.10 views

CVE-2024-2669 Campcodes Online Job Finder System GET Parameter controller.php sql injection

A vulnerability was found in Campcodes Online Job Finder System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/employee/controller.php of the component GET Parameter Handler. The manipulation of the argument EMPLOYEEID leads to sql injection. The...

6.5CVSS7.4AI score0.00046EPSS
Exploits1References3
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:0 a.m.2 views

The vulnerability of the Query Parameter Handler component in the IBM TXSeries for Multiplatforms transaction management software solutions, including the IBM CICS TX Standard and IBM CICS TX Advanced application servers, allows a malicious individual to gain unauthorized access to confidential information.

The vulnerability of the Query Parameter Handler component in the IBM TXSeries transaction application management software for multiplatforms, as well as in the IBM CICS TX Standard and IBM CICS TX Advanced application servers, is related to the use of an unprotected communication channel for dat...

3.7CVSS5.5AI score0.00046EPSS
Exploits0References6Affected Software3
Prion
Prion
added 2024/02/29 1:43 a.m.12 views

Sql injection

A vulnerability has been found in Surya2Developer Online Shopping System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument password with the input...

7.5CVSS8.1AI score0.0007EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/02/28 8:31 p.m.16 views

CVE-2024-1971 Surya2Developer Online Shopping System POST Parameter login.php sql injection

A vulnerability has been found in Surya2Developer Online Shopping System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument password with the input...

7.5CVSS7.8AI score0.0007EPSS
Exploits0References3
NVD
NVD
added 2024/01/26 9:15 p.m.11 views

CVE-2024-0945

A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the file /include/file.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotel...

9.8CVSS7.9AI score0.00088EPSS
Exploits0References3
NVD
NVD
added 2024/01/26 9:15 p.m.13 views

CVE-2024-0946

A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of the file /apply/index.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Th...

9.8CVSS7.9AI score0.00065EPSS
Exploits0References3
OSV
OSV
added 2024/01/26 9:15 p.m.3 views

CVE-2024-0945

A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the file /include/file.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotel...

9.8CVSS5.3AI score0.00088EPSS
Exploits0References3
Prion
Prion
added 2024/01/26 9:15 p.m.21 views

Server side request forgery (ssrf)

A vulnerability classified as critical has been found in 60IndexPage up to 1.8.5. This affects an unknown part of the file /include/file.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate the attack remotel...

7.5CVSS7.1AI score0.00088EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2024/01/26 9:15 p.m.21 views

Server side request forgery (ssrf)

A vulnerability classified as critical was found in 60IndexPage up to 1.8.5. This vulnerability affects unknown code of the file /apply/index.php of the component Parameter Handler. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Th...

7.5CVSS7.2AI score0.00065EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder