Lucene search
+L

7412 matches found

CVE
CVE
•added 2023/12/28 3:31 p.m.•58 views

CVE-2023-7129

The CVE-2023-7129 entry relates to code-projects Voting System 1.0, specifically a vulnerability in the Voters Login function that allows SQL injection by manipulating the voter argument. The vulnerability is described as critical with a public exploit disclosure. Exploitation status is noted in ...

8.8CVSS6.1AI score0.00634EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/28 3:31 p.m.•48 views

CVE-2023-7129 code-projects Voting System Voters Login sql injection

A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login. The manipulation of the argument voter leads to sql injection. The exploit has been disclosed to the public and may be used. The identifi...

5.5CVSS9.2AI score0.00634EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/28 3:15 p.m.•31 views

CVE-2023-7128

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

8.8CVSS0.00701EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/12/28 3:00 p.m.•52 views

CVE-2023-7128 code-projects Voting System Admin Login sql injection

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

6.3CVSS9.2AI score0.00701EPSS
SaveExploits1References3
CVE
CVE
•added 2023/12/28 2:31 p.m.•88 views

CVE-2023-7127

The CVE-2023-7127 entry concerns code-projects Automated Voting System 1.0. The vulnerability affects the Login component where manipulation of the argument idno leads to SQL injection, as described in public disclosures. Exploitation information is present in the source materials, indicating a s...

9.8CVSS6.5AI score0.0072EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/12/28 2:31 p.m.•52 views

CVE-2023-7127 code-projects Automated Voting System Login sql injection

A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login. The manipulation of the argument idno leads to sql injection. The exploit has been disclosed to the public and may be used. VDB-249130 is...

6.3CVSS10AI score0.0072EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/28 2:15 p.m.•37 views

CVE-2023-7126

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

8.8CVSS0.00701EPSS
SaveExploits1References3
Prion
Prion
•added 2023/12/28 2:15 p.m.•32 views

Sql injection

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

5.8CVSS7.7AI score0.00701EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/12/28 2:00 p.m.•72 views

CVE-2023-7126

The CVE-2023-7126 entry affects code-projects Automated Voting System 1.0, specifically the Admin Login component’s /admin/ path. The root cause is a SQL injection via the username parameter in the Admin Login workflow, with public exploitation noted. Mitigations documented in connected sources i...

8.8CVSS6.5AI score0.00701EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2023/12/28 3:15 a.m.•37 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

5CVSS6.5AI score0.0067EPSS
SaveExploits1References3Affected Software1
CVE
CVE
•added 2023/12/28 2:31 a.m.•80 views

CVE-2023-7124

CVE-2023-7124 affects code-projects E-Commerce Site 1.0. the vulnerability is in an unknown function of search.php, where the keyword parameter can be crafted as to trigger a cross-site scripting (XSS). The issue is exploitable remotely and the exploit has been disclosed publicly. Connected sour...

6.1CVSS3.9AI score0.0067EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•29 views

PT-2023-32896 · Unknown · Code-Projects Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Record Management System version 1.0 Description: A problematic issue has been discovered, affecting an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename...

5.4CVSS4.9AI score0.00491EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•21 views

PT-2023-32892 · Code Projects · Code-Projects Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: code-projects Intern Membership Management System version 2.0 Description: A critical issue was found in the User Registration component, specifically in the /user registration/ file. The manipulation of the userName argument leads to SQL...

9.8CVSS6.5AI score0.0072EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•9 views

CVE-2023-7126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to the public and may...

8.8CVSS6.5AI score0.00701EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•4 views

PT-2023-32893

Name of the Vulnerable Software and Affected Versions code-projects Intern Membership Management System version 2.0 Description A vulnerability was found in the code-projects Intern Membership Management System, affecting an unknown part of the file /user registration/ of the component User...

5.4CVSS4.3AI score0.00613EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•2 views

PT-2023-32901

Name of the Vulnerable Software and Affected Versions code-projects Client Details System version 1.0 Description A vulnerability was found in the code-projects Client Details System, affecting some unknown processing of the file /admin/manage-users.php. The manipulation of the id argument leads ...

9.8CVSS5.6AI score0.00644EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•4 views

CVE-2023-7128: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/ of the component Admin Login. The manipulation of the argument username leads to sql injection. The exploit has been disclosed to th...

8.8CVSS6.5AI score0.00701EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•5 views

CVE-2023-7124: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in code-projects E-Commerce Site 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument keyword with the input leads to cross site scripting. It is possible to launch the attack remotely. The...

6.1CVSS3.9AI score0.0067EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/12/28 12:00 a.m.•5 views

PT-2023-32890

Name of the Vulnerable Software and Affected Versions code-projects Voting System version 1.0 Description A critical vulnerability was found in the Voting System. The issue affects an unknown function of the component Voters Login. The manipulation of the voter argument leads to SQL injection. Th...

8.8CVSS5.4AI score0.00634EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/28 12:00 a.m.•6 views

CVE-2023-7135: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offices.php of the component Offices Handler. The manipulation of the argument officename with the input " leads to cross site scripting. It is...

5.4CVSS3.8AI score0.00491EPSS
SaveExploits1References2
Rows per page
Query Builder