Lucene search
+L

12045 matches found

NVD
NVD
added 2023/02/27 4:15 p.m.43 views

CVE-2023-24651

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page...

5.4CVSS5.8AI score0.00561EPSS
SaveExploits1References3
OSV
OSV
added 2023/02/27 4:15 p.m.11 views

CVE-2023-0552

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability...

5.4CVSS6.7AI score0.24263EPSS
SaveExploits2References1
NVD
NVD
added 2023/02/27 4:15 p.m.31 views

CVE-2023-0552

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability...

5.4CVSS5.4AI score0.24263EPSS
SaveExploits2References1
Prion
Prion
added 2023/02/27 4:15 p.m.30 views

Open redirect

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability...

4.9CVSS5.4AI score0.24263EPSS
SaveExploits2References1Affected Software1
Prion
Prion
added 2023/02/27 4:15 p.m.21 views

Sql injection

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page...

4.9CVSS5.9AI score0.00561EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2023/02/27 3:24 p.m.122 views

CVE-2023-0552

CVE-2023-0552 concerns the WordPress plugin Pie Register (pre-3.8.2.3). The issue is an Open Redirect caused by improper validation of the redirection URL during login and logout. Exploitation would involve an attacker steering a user to a malicious site via the redirect_to parameter, with potent...

5.4CVSS5.3AI score0.24263EPSS
SaveIn wildExploits2References1Affected Software1
Cvelist
Cvelist
added 2023/02/27 3:24 p.m.48 views

CVE-2023-0552 Pie Register < 3.8.2.3 - Open Redirect

The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability...

5.7AI score0.24263EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2023/02/27 12:00 a.m.16 views

WordPress Plugin Registration Forms 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

5.4CVSS6.9AI score0.24263EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:00 a.m.21 views

The vulnerability of the PowerScale OneFS operating systems, related to the disclosure of information through registration files, allows a perpetrator to gain full control over the system.

The vulnerability of the PowerScale OneFS operating system lies in the fact that information can be disclosed through registration files when changing the password via the interface. Exploiting this vulnerability could allow an attacker to gain full control over the system...

7.8CVSS7.2AI score0.0018EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/27 12:00 a.m.26 views

PT-2023-19724 · Unknown · Simple Customer Relationship Management System

Name of the Vulnerable Software and Affected Versions: Simple Customer Relationship Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter on the registration page. Recommendations: For Simple...

5.4CVSS5.7AI score0.00561EPSS
SaveExploits1References7
zdt
zdt
added 2023/02/27 12:00 a.m.312 views

Yoga Class Registration System 1.0 SQL Injection Vulnerability

Exploit Title: Authenticated POST based SQL Injection when delete user on Yoga Class Registration System Exploit Author: Ahmed Ismail @MrOz1l Vendor Homepage: https://www.sourcecodester.com/php/16097/yoga-class-registration-system-php-and-mysql-free-source-code.html Software Link: download link i...

9.8CVSS9.2AI score0.00541EPSS
SaveExploits2
Cvelist
Cvelist
added 2023/02/27 12:00 a.m.48 views

CVE-2023-24651

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page...

6.2AI score0.00561EPSS
SaveExploits1References3
NVD
NVD
added 2023/02/23 12:15 p.m.41 views

CVE-2023-0981

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits2References2
OSV
OSV
added 2023/02/23 12:15 p.m.17 views

CVE-2023-0982

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS6.6AI score0.00541EPSS
SaveExploits2References2
NVD
NVD
added 2023/02/23 12:15 p.m.40 views

CVE-2023-0982

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits2References2
OSV
OSV
added 2023/02/23 12:15 p.m.12 views

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

9.8CVSS6.6AI score
SaveExploits0References2
NVD
NVD
added 2023/02/23 12:15 p.m.33 views

CVE-2023-0980

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

9.8CVSS7.4AI score0.00541EPSS
SaveExploits0References2
Prion
Prion
added 2023/02/23 12:15 p.m.27 views

Sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0 and classified as critical. This issue affects some unknown processing of the file admin/registrations/updatestatus.php of the component Status Update Handler. The manipulation of the argument id leads to sql injection...

6.5CVSS9.7AI score0.00541EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2023/02/23 12:15 p.m.23 views

Sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been classified as critical. Affected is an unknown function of the component Delete User. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifie...

6.5CVSS9.8AI score0.00541EPSS
SaveExploits2References2Affected Software1
Cvelist
Cvelist
added 2023/02/23 11:06 a.m.63 views

CVE-2023-0982 SourceCodester Yoga Class Registration System Add Class Entry sql injection

A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Add Class Entry. The manipulation of the argument id leads to sql injection. The attack can be launched...

6.5CVSS10AI score0.00541EPSS
SaveExploits2References2
Rows per page
Query Builder