Lucene search
+L

62 matches found

CNNVD
CNNVD
added 2025/06/30 12:0 a.m.13 views

Code-Projects Daily Expense Manager SQL注入漏洞

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the parameters pname, pprice, and id in the file /update.php. No details of the vulnerabilit...

9.8CVSS7.9AI score0.00296EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:22 a.m.10 views

CVE-2024-1871

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

5.4CVSS3.8AI score0.00505EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 7:1 a.m.7 views

CVE-2024-46241

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...

5.9CVSS6AI score0.00221EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/09/25 12:0 a.m.7 views

Dairy Farm Shop Management System Cross-Site Scripting Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the pname parameter of the...

5.9CVSS6.2AI score0.00221EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/23 1:15 p.m.8 views

CVE-2024-46241

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...

5.9CVSS5.8AI score0.00221EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/09/23 12:0 a.m.17 views

CVE-2024-46241

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...

5.9AI score0.00221EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/09/23 12:0 a.m.24 views

CVE-2024-46241

PHPGurukul Dairy Farm Shop Management System v1.1 is vulnerable to Cross-Site Scripting XSS via the pname parameter in addproduct.php and editproduct.php...

0.00221EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/09/23 12:0 a.m.26 views

PHPGurukul Dairy Farm Shop Management System 安全漏洞

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . The Dairy Farm Shop Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the pname parameter of the...

5.9CVSS6.2AI score0.00221EPSS
SaveExploits1References2
OSV
OSV
added 2024/07/30 9:15 a.m.7 views

CVE-2024-7225

A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /Script/admin/core/updatepolicy of the component Edit Insurance Policy Page. The manipulation of the argument pname leads to cross site...

5.4CVSS3.8AI score0.00515EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/30 12:0 a.m.8 views

Insurance Management System 跨站脚本漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A cross-site scripting vulnerability exists in Insurance Management System version 1.0, which stems from the parameter pname in the file /Script/admin/core/updatepolicy that result...

5.4CVSS4.4AI score0.00515EPSS
SaveExploits1References5
OSV
OSV
added 2024/02/26 4:27 p.m.9 views

CVE-2024-1871

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

5.4CVSS3.7AI score0.00505EPSS
SaveExploits0References3
Prion
Prion
added 2024/02/26 4:27 p.m.27 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Employee Management System 1.0. Affected is an unknown function of the file /process/assignp.php of the component Project Assignment Report. The manipulation of the argument pname leads to cross site scripting. It i...

4CVSS6.7AI score0.00505EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/02/26 12:0 a.m.7 views

SourceCodester Employee Management System Cross-Site Scripting Vulnerability

SourceCodester Employee Management System is a php-based employee performance management system from SourceCodester, Inc. A cross-site scripting vulnerability exists in the SourceCodester Employee Management System version 1.0, which stems from a cross-site scripting vulnerability due to incorrec...

5.4CVSS6.1AI score0.00505EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.7 views

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

5.4CVSS6.2AI score0.00509EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/14 10:15 p.m.9 views

CVE-2023-46580

Cross-Site Scripting XSS vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of the editProduct.php component...

5.4CVSS6.1AI score0.00509EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/11/14 12:0 a.m.6 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A cross-site scripting vulnerability exists in Inventory Management System version V1.0 that could allow an attacker to execute arbitrary code via the pname parameter of the editProduct.php...

5.4CVSS6.9AI score0.00509EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/02 3:15 a.m.8 views

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

7.2CVSS5.8AI score0.00883EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/02 3:15 a.m.11 views

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

7.2CVSS7.2AI score0.00883EPSS
SaveExploits1References2
Prion
Prion
added 2022/08/02 3:15 a.m.20 views

Sql injection

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

5.8CVSS7.2AI score0.00883EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/08/02 2:54 a.m.41 views

CVE-2022-35421

Online Tours And Travels Management System v1.0 was discovered to contain a SQL injection vulnerability via the pname parameter at /admin/operations/packages.php...

7.5AI score0.00883EPSS
SaveExploits1References1
Rows per page
Query Builder