Lucene search
+L

5737 matches found

CNNVD
CNNVD
added 2024/11/03 12:0 a.m.20 views

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter email/adminpswd in the file /Admin/adminlogin.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00652EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/03 12:0 a.m.10 views

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is a Code-Projects open source e-health care system. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0, which stems from the parameter fname in the file /Users/registration.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00661EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/03 12:0 a.m.9 views

Code-Projects E-Health Care System SQL注入漏洞

Code-Projects E-Health Care System is an e-health care system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects E-Health Care System version 1.0 and earlier, which stems from the parameter consultingid in the file /Admin/consultingdetail.php that can lead to SQ...

9.8CVSS7AI score0.00553EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/03 12:0 a.m.7 views

PT-2024-16496 · Unknown · Code-Projects Restaurant Order System

Name of the Vulnerable Software and Affected Versions: code-projects Restaurant Order System version 1.0 Description: A critical issue was found in the code-projects Restaurant Order System, affecting some unknown functionality of the file /login.php. The manipulation of the uid argument leads to...

9.8CVSS8.1AI score0.00652EPSS
SaveExploits1References12
Vulnrichment
Vulnrichment
added 2024/11/02 4:0 p.m.19 views

CVE-2024-10700 code-projects University Event Management System submit.php sql injection

A vulnerability was found in code-projects University Event Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file submit.php. The manipulation of the argument name/email/title/Year/gender/fromdate/todate/people leads to sql injection. The...

6.5CVSS6.8AI score0.00572EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/11/02 2:31 p.m.15 views

CVE-2024-10699 code-projects Wazifa System logincontrol.php sql injection

A vulnerability was found in code-projects Wazifa System 1.0. It has been classified as critical. This affects an unknown part of the file /controllers/logincontrol.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit h...

7.5CVSS7.5AI score0.00698EPSS
SaveExploits1References5
GithubExploit
GithubExploit
added 2024/11/02 1:32 p.m.114 views

zero-day

Zero-Day Vulnerabilities in Open-Source Projects This reposi...

7.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/11/02 12:0 a.m.16 views

PT-2024-16473 · Unknown · Code-Projects Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical issue was found in the code-projects Wazifa System, affecting an unknown part of the file /controllers/logincontrol.php. The manipulation of the username argument leads to SQL...

9.8CVSS7.9AI score0.00698EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2024/11/02 12:0 a.m.12 views

Code-Projects University Event Management System SQL注入漏洞

Code-Projects University Event Management System is an open source university event management system from Code-Projects. Code-Projects University Event Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter...

9.8CVSS7AI score0.00572EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/11/02 12:0 a.m.7 views

Code-Projects Simple Car Rental System SQL注入漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A SQL injection vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from the parameter fname in the file /signup.php that can lead to SQL injection...

9.8CVSS7.9AI score0.00614EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/01 3:15 p.m.18 views

CVE-2024-37411

Missing Authorization vulnerability in Progress Planner Progress Planner progress-planner.This issue affects Progress Planner: from n/a through = 0.9.1...

5.3CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 2:18 p.m.17 views

CVE-2024-37411 WordPress Progress Planner plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in Team Emilia Projects Progress Planner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Progress Planner: from n/a through 0.9.1...

5.3CVSS6.9AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/01 2:18 p.m.56 views

CVE-2024-37411

CVE-2024-37411 describes a Missing Authorization vulnerability in the WordPress plugin Progress Planner. Concrete details in connected sources identify a Broken Access Control issue, affecting Progress Planner versions from n/a through 0.9.1 (

5.3CVSS5.9AI score0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/01 12:31 a.m.13 views

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS7.3AI score0.00698EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/11/01 12:31 a.m.35 views

CVE-2024-10608 code-projects Courier Management System login.php sql injection

A vulnerability was found in code-projects Courier Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /login.php. The manipulation of the argument txtusername leads to sql injection. The attack may be initiated remotely. The exploit has be...

7.5CVSS0.00698EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/11/01 12:0 a.m.9 views

PT-2024-27531 · Unknown · Team Emilia Projects Progress Planner

Name of the Vulnerable Software and Affected Versions: Team Emilia Projects Progress Planner versions 0.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For versions...

5.3CVSS6AI score0.00396EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2024/10/31 11:31 p.m.31 views

CVE-2024-10605 code-projects Blood Bank Management System request.php cross-site request forgery

A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /file/request.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has bee...

6.9CVSS0.00392EPSS
SaveExploits1References5
CVE
CVE
added 2024/10/31 11:31 p.m.68 views

CVE-2024-10605

CVE-2024-10605 affects Code-Projects Blood Bank Management System 1.0. The vulnerability is a cross-site request forgery in an unspecified portion of the file /file/request.php. Attack is feasible remotely and exploitation is possible without user privileges, with user interaction required per CV...

6.9CVSS4.9AI score0.00392EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
added 2024/10/31 1:0 a.m.38 views

CVE-2024-10557 code-projects Blood Bank Management System updateprofile.php cross-site request forgery

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely...

6.9CVSS0.00575EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/31 12:0 a.m.8 views

Code-Projects Blood Bank Management System 跨站请求伪造漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A cross-site request forgery vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a cross-site request forgery vulnerability contained in the fi...

6.9CVSS5AI score0.00392EPSS
SaveExploits1References1
Rows per page
Query Builder