Lucene search
+L

1413 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/07 12:00 a.m.•1 views

CVE-2023-3543: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file load.php of the component HTTP POST Request Handler. The manipulation of the argument cid/firstname/secondname/address1/country leads to...

6.1CVSS3.9AI score0.00388EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/29 9:15 p.m.•29 views

CVE-2023-3465

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...

6.1CVSS4.5AI score0.00502EPSS
SaveExploits0References3
Prion
Prion
•added 2023/06/29 9:15 p.m.•31 views

Cross site scripting

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...

4CVSS6.1AI score0.00502EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2023/06/29 9:00 p.m.•40 views

CVE-2023-3465 SimplePHPscripts Classified Ads Script HTTP POST Request user.php cross site scripting

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...

4CVSS6.3AI score0.00502EPSS
SaveExploits0References3
CVE
CVE
•added 2023/06/29 9:00 p.m.•60 views

CVE-2023-3465

CVE-2023-3465 affects SimplePHPscripts Classified Ads Script 1.8. The vulnerability resides in the HTTP POST Request Handler, specifically the file user.php, where manipulating the title argument enables cross-site scripting. Attacks are described as remotely explitable. The recommended fix is up...

6.1CVSS4.9AI score0.00502EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/29 12:00 a.m.•0 views

CVE-2023-3465: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file user.php of the component HTTP POST Request Handler. The manipulation of the argument title leads to cross site...

6.1CVSS3.7AI score0.00502EPSS
SaveExploits0References2
NVD
NVD
•added 2023/06/15 1:15 p.m.•20 views

CVE-2023-3275

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

9.8CVSS7.4AI score0.0055EPSS
SaveExploits0References2
OSV
OSV
•added 2023/06/15 1:15 p.m.•11 views

CVE-2023-3275

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

9.8CVSS6.7AI score0.0055EPSS
SaveExploits0References2
Prion
Prion
•added 2023/06/15 1:15 p.m.•26 views

Sql injection

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

6.5CVSS9.7AI score0.0055EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2023/06/15 12:31 p.m.•30 views

CVE-2023-3275 PHPGurukul Rail Pass Management System POST Request view-pass-detail.php sql injection

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

6.5CVSS10AI score0.0055EPSS
SaveExploits0References2
CVE
CVE
•added 2023/06/15 12:31 p.m.•61 views

CVE-2023-3275

CVE-2023-3275 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability resides in the POST Request Handler for the /view-pass-detail.php endpoint, where the searchdata parameter manipulation leads to SQL injection. It can be exploited remotely. Multiple connected documents confirm th...

9.8CVSS7.4AI score0.0055EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/15 12:00 a.m.•0 views

CVE-2023-3275: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument searchdata leads to sql injection. T...

9.8CVSS6.6AI score0.0055EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•17 views

PT-2023-23998 · Unknown · Phpgurukul Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Rail Pass Management System version 1.0 Description: A critical vulnerability was found in the PHPGurukul Rail Pass Management System. The issue affects an unknown functionality of the file /view-pass-detail.php, specifically the...

9.8CVSS8.2AI score0.0055EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/05/04 5:00 p.m.•32 views

CVE-2023-2521 NEXTU NEXT-7004N POST Request formFilter cross site scripting

A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to cross site scripting. It is possible to...

4CVSS6.3AI score0.00343EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/04 12:00 a.m.•0 views

CVE-2023-2521: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to cross site scripting. It is possible to...

6.1CVSS4AI score0.00343EPSS
SaveExploits0References3
OSV
OSV
•added 2023/04/27 2:15 p.m.•14 views

CVE-2023-2344

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

9.8CVSS5.8AI score0.00834EPSS
SaveExploits1References3
Prion
Prion
•added 2023/04/27 2:15 p.m.•33 views

Sql injection

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

6.5CVSS9.6AI score0.00834EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•1 views

CVE-2023-2344: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SourceCodester Service Provider Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=saveservice of the component HTTP POST Request Handler. The manipulation of the argument...

9.8CVSS5.5AI score0.00834EPSS
SaveExploits1References2
OSV
OSV
•added 2023/04/14 2:15 p.m.•14 views

CVE-2023-2058

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

6.1CVSS3.8AI score0.00609EPSS
SaveExploits1References3
NVD
NVD
•added 2023/04/14 2:15 p.m.•28 views

CVE-2023-2058

A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument...

6.1CVSS4.3AI score0.00609EPSS
SaveExploits1References3
Rows per page
Query Builder