Lucene search
+L

8 matches found

NVD
NVD
•added 2024/03/01 10:15 p.m.•35 views

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

9.8CVSS7.3AI score0.23581EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•7 views

CVE-2024-27743: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

6.1CVSS6.5AI score0.01307EPSS
SaveExploits4References2
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•45 views

CVE-2024-27743

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the Address parameter in the addinvoices.php component...

7AI score0.01307EPSS
SaveExploits4References1
Cvelist
Cvelist
•added 2024/03/01 12:00 a.m.•49 views

CVE-2024-27747

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

7.6AI score0.23581EPSS
SaveExploits4References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•5 views

CVE-2024-27747: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component...

9.8CVSS6.5AI score0.23581EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•5 views

CVE-2024-27744: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the image parameter in the profile.php component...

6.1CVSS6.5AI score0.01335EPSS
SaveExploits4References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/01 12:00 a.m.•4 views

CVE-2024-27746: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component...

9.8CVSS6.5AI score0.12946EPSS
SaveExploits4References2
Positive Technologies
Positive Technologies
•added 2024/02/29 12:00 a.m.•4 views

PT-2024-22021

Name of the Vulnerable Software and Affected Versions Petrol Pump Mangement Software version 1.0 Description The issue allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the "index.php" component. This enables the attacker to inject malicious SQL...

9.8CVSS0.12946EPSS
SaveExploits4References9
Rows per page
Query Builder