Lucene search
K

19 matches found

Cvelist
Cvelist
added 2026/06/08 6:30 p.m.31 views

CVE-2026-11558 CodeAstro Payroll System home_salary.php sql injection

A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /homesalary.php. The manipulation of the argument rate/salaryrate leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS0.00209EPSS
Exploits0References8
Vulnrichment
Vulnrichment
added 2026/06/08 6:30 p.m.8 views

CVE-2026-11558 CodeAstro Payroll System home_salary.php sql injection

A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /homesalary.php. The manipulation of the argument rate/salaryrate leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.4AI score0.00209EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2026/06/08 6:30 p.m.5 views

CVE-2026-11558

A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /homesalary.php. The manipulation of the argument rate/salaryrate leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.4AI score0.00209EPSS
Exploits0References8Affected Software1
CVE
CVE
added 2026/06/08 6:30 p.m.18 views

CVE-2026-11558

CodeAstro Payroll System 1.0 contains a SQL injection vulnerability in an unknown function within /home_salary.php. The vulnerability arises from manipulation of the rate/salary_rate argument and is exploitable remotely. The exploit has been publicly disclosed and may be used. The connected sourc...

6.5CVSS5.4AI score0.00209EPSS
Exploits0References8
CNNVD
CNNVD
added 2026/06/08 12:0 a.m.10 views

CodeAstro Payroll System 注入漏洞

The CodeAstro Payroll System is a payroll management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Payroll System has a SQL injection vulnerability. This vulnerability arises from an unknown function in the /homesalary.php file, which improperly handles the parameters...

6.5CVSS6.6AI score0.00209EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.10 views

PT-2026-47439

A security vulnerability has been detected in CodeAstro Payroll System 1.0. The impacted element is an unknown function of the file /home salary.php. The manipulation of the argument rate/salary rate leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

6.5CVSS6.4AI score0.00209EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/10/25 12:43 a.m.12 views

CVE-2025-60938

Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baudrate,...

7.5CVSS8.7AI score0.00556EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/10/25 12:0 a.m.4 views

Emoncms 安全漏洞

Emoncms is an open source web application from Emoncms Open Source. The program is primarily used to process, record and display energy, temperature and other environmental data. A security vulnerability exists in Emoncms version 11.7.3, which stems from insufficient input validation of the...

7.5CVSS7.8AI score0.00556EPSS
Exploits1References1
NVD
NVD
added 2025/10/24 3:15 p.m.8 views

CVE-2025-60938

Emoncms 11.7.3 has a remote code execution vulnerability in the firmware upload feature that allows authenticated users to execute arbitrary commands on the target system. The vulnerability stems from insufficient input validation of user-controlled parameters including filename, port, baudrate,...

7.5CVSS0.00556EPSS
Exploits1References1
OSV
OSV
added 2025/04/03 2:15 a.m.1 views

CVE-2025-3134

A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /addovertime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS6.5AI score0.00405EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/03 12:0 a.m.5 views

Code-Projects Payroll Management System 注入漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter rate that can lead to SQL injection...

8.8CVSS7.1AI score0.00405EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/03/31 12:0 a.m.5 views

Code-Projects Payroll Management System 安全漏洞

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter salaryrate that can lead to SQL injection...

8.8CVSS6.9AI score0.00555EPSS
Exploits1References1
CNVD
CNVD
added 2017/11/01 12:0 a.m.5 views

Fake Magazine Cover Script SQL Injection Vulnerability

Fake Magazine Cover Script is a script for creating magazine cover websites. Fake Magazine Cover Script suffers from a SQL injection vulnerability. An attacker can perform SQL injection via the rate.php value parameter or the content.php id parameter...

9.8CVSS8.2AI score0.0198EPSS
Exploits5References1
NVD
NVD
added 2017/10/31 7:29 a.m.20 views

CVE-2017-15987

Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter...

9.8CVSS9.9AI score0.0198EPSS
Exploits5References1
Dsquare
Dsquare
added 2015/02/10 12:0 a.m.38 views

Piwigo rate parameter SQL Injection

SQL injection vulnerability in include/functionsrate.inc.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

7.5CVSS0.7AI score0.0274EPSS
Exploits2References1
NVD
NVD
added 2014/12/23 11:59 a.m.13 views

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

7.5CVSS8.3AI score0.0274EPSS
Exploits2References4
OpenVAS
OpenVAS
added 2014/11/21 12:0 a.m.18 views

Piwigo 'rate' Parameter SQLi Vulnerability

Piwigo is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo";...

7.5CVSS8AI score0.0274EPSS
Exploits2References4
Exploit DB
Exploit DB
added 2010/06/22 12:0 a.m.35 views

Classifieds Script - 'rate' SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Classifieds SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...

7.4AI score
Exploits0
Prion
Prion
added 2008/11/04 12:58 a.m.14 views

Cross site scripting

Cross-site scripting XSS vulnerability in planetluc RateMe 1.3.3 allows remote attackers to inject arbitrary web script or HTML via the rate parameter in a submit rate action...

4.3CVSS6.1AI score0.01033EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder