Lucene search
K

991 matches found

Positive Technologies
Positive Technologies
added 2022/12/01 12:0 a.m.4 views

PT-2022-26456 · Unknown · Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Movie Ticket Booking System affected versions not specified Description: A problematic issue was found in the Movie Ticket Booking System, affecting an unknown function of the component POST Request Handler. The manipulation of the ORDER ID...

6.1CVSS5.9AI score0.00356EPSS
Exploits1References4
CVE
CVE
added 2022/12/01 12:0 a.m.42 views

CVE-2022-4249

CVE-2022-4249 affects the Movie Ticket Booking System. Affected component: POST Request Handler. Root cause: manipulation of the ORDER_ID argument leads to a Cross-Site Scripting (XSS) vulnerability. Impact: allows remote exploitation; attacker can inject script via ORDER_ID. Public exploit/usage...

6.1CVSS4.8AI score0.00356EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/11/30 7:15 a.m.2 views

CVE-2022-4222

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects the function query of the file ajaxinvoice.php of the component POST Request Handler. The manipulation of the argument search leads to sql injection. The attack may be initiate...

9.8CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2022/11/30 7:15 a.m.13 views

CVE-2022-4222

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects the function query of the file ajaxinvoice.php of the component POST Request Handler. The manipulation of the argument search leads to sql injection. The attack may be initiate...

9.8CVSS0.00662EPSS
Exploits1References2
CVE
CVE
added 2022/11/30 12:0 a.m.44 views

CVE-2022-4222

CVE-2022-4222 affects SourceCodester Canteen Management System. The vulnerability exists in the POST Request Handler’s function ajax_invoice.php, where manipulation of the parameter that accepts the search value enables a SQL injection. Remote exploitation is suggested by the description. Public ...

9.8CVSS7.7AI score0.00662EPSS
Exploits1References2Affected Software1
NVD
NVD
added 2022/08/05 9:15 p.m.17 views

CVE-2022-2676

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

9.8CVSS0.00613EPSS
Exploits1References2
Prion
Prion
added 2022/08/05 9:15 p.m.10 views

Sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

7.5CVSS9.6AI score0.00613EPSS
Exploits1References2
Cvelist
Cvelist
added 2022/08/05 8:20 p.m.26 views

CVE-2022-2676 SourceCodester Electronic Medical Records System POST Request sql injection

A vulnerability was found in SourceCodester Electronic Medical Records System and classified as critical. Affected by this issue is some unknown functionality of the component POST Request Handler. The manipulation of the argument useremail leads to sql injection. The attack may be launched...

6.3CVSS9.9AI score0.00613EPSS
Exploits1References2
NVD
NVD
added 2022/08/05 12:15 p.m.10 views

CVE-2022-2673

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to s...

8.8CVSS0.00465EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/08/05 11:40 a.m.13 views

CVE-2022-2673 Rigatur Online Booking and Hotel Management System POST Request login.php sql injection

A vulnerability was found in Rigatur Online Booking and Hotel Management System aff6409. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Request Handler. The manipulation of the argument email/pass leads to s...

6.3CVSS9.2AI score0.00465EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/08/05 10:45 a.m.4 views

CVE-2022-2664 Private Cloud Management Platform POST Request global_config_query improper authentication

A vulnerability classified as critical has been found in Private Cloud Management Platform. Affected is an unknown function of the file /management/api/rcxmanagement/globalconfigquery of the component POST Request Handler. The manipulation leads to improper authentication. It is possible to launc...

7.3CVSS7AI score0.00579EPSS
Exploits0References1
Rows per page
Query Builder