Lucene search
+L

4027 matches found

OSV
OSV
added 2023/04/08 8:15 a.m.9 views

CVE-2023-1950

A vulnerability has been found in PHPGurukul BP Monitoring Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file password-recovery.php of the component Password Recovery. The manipulation of the argument emailid/contactno leads to...

9.8CVSS5.7AI score0.00737EPSS
SaveExploits1References3
OSV
OSV
added 2023/04/02 7:15 a.m.8 views

CVE-2023-1791

A vulnerability has been found in SourceCodester Simple Task Allocation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file manageuser.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS6.5AI score0.00608EPSS
SaveExploits0References3
OSV
OSV
added 2023/04/02 7:15 a.m.7 views

CVE-2023-1792

A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/fields/managefield.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql...

9.8CVSS5.7AI score0.00726EPSS
SaveExploits1References3
NVD
NVD
added 2023/03/19 8:15 p.m.29 views

CVE-2023-1498

A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack...

9.8CVSS7.5AI score0.00871EPSS
SaveExploits0References3
OSV
OSV
added 2023/03/13 9:15 a.m.7 views

CVE-2023-1368

A vulnerability was found in XHCMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php of the component POST Parameter Handler. The manipulation of the argument user leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.9AI score0.008EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:0 a.m.13 views

The vulnerability of the microprogrammed network interface controllers from SonicWall, models SMA 210, SMA 410, SMA 500v, allows attackers to execute arbitrary SQL queries.

The vulnerability of SonicWall’s SMA 210, SMA 410, and SMA 500v network firewall microprogramming systems lies in the lack of security measures for handling SQL query structures. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries remotely...

10CVSS8.2AI score0.29866EPSS
SaveExploits0References3Affected Software3
OSV
OSV
added 2023/02/27 11:15 a.m.8 views

CVE-2023-1054

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of...

9.8CVSS5.7AI score0.00463EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.6 views

SUSE CVE-2006-0146

The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PHPOpenChat, 7 MAXdev MD-Pro, and 8 MediaBeez, when the MySQL root password is empty, allows remote attackers to execute arbitrary SQL commands via...

7.5CVSS8.7AI score0.13237EPSS
SaveExploits2References3
SUSE CVE
SUSE CVE
added 2023/02/15 6:2 a.m.3 views

SUSE CVE-2009-3165

SQL injection vulnerability in the Bug.create WebService function in Bugzilla 2.23.4 through 3.0.8, 3.1.1 through 3.2.4, and 3.3.1 through 3.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters...

7.5CVSS8.8AI score0.01393EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:23 a.m.7 views

SUSE CVE-2015-0244

PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3.x before 9.3.6, and 9.4.x before 9.4.1 does not properly handle errors while reading a protocol message, which allows remote attackers to conduct SQL injection attacks via crafted binary data in a parameter and causing an...

9.8CVSS8AI score0.04363EPSS
SaveExploits0References5
OSV
OSV
added 2023/02/04 8:15 a.m.7 views

CVE-2023-0673

A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file oews/?p=products/viewproduct.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The...

8.1CVSS5.8AI score0.00457EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/03 6:15 p.m.7 views

CVE-2021-36434

SQL injection vulnerability in jocms 0.8 allows remote attackers to run arbitrary SQL commands and view sentivie information via jojsoncheck function in jocms/apps/mask/inc/getmask.php...

9.1CVSS6AI score0.00864EPSS
SaveExploits1References1
NVD
NVD
added 2022/12/17 7:15 p.m.18 views

CVE-2021-4246

A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is...

9.8CVSS0.00518EPSS
SaveExploits0References2
OSV
OSV
added 2022/12/17 7:15 p.m.21 views

CVE-2021-4246

A vulnerability was found in roxlukas LMeve and classified as critical. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument X-Forwarded-For leads to sql injection. The attack may be launched remotely. The name of the patch is...

9.8CVSS7.5AI score
SaveExploits0References2
NVD
NVD
added 2022/11/24 10:15 a.m.27 views

CVE-2022-4088

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit...

9.8CVSS0.00563EPSS
SaveExploits1References2
NVD
NVD
added 2022/11/01 4:15 p.m.16 views

CVE-2022-3799

A vulnerability classified as critical was found in IBAX go-ibax. Affected by this vulnerability is an unknown functionality of the file /api/v2/open/tablesInfo. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be...

8.8CVSS0.0056EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/28 8:15 a.m.7 views

CVE-2022-3731

A vulnerability has been found in seccome Ehoney and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/attack/token. The manipulation of the argument Payload leads to sql injection. The attack can be launched remotely. The identifier VDB-212413...

9.8CVSS5.8AI score0.00439EPSS
SaveExploits0References1
OSV
OSV
added 2022/10/18 11:15 a.m.11 views

CVE-2022-3583

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.7AI score0.00663EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2022/09/29 1:51 a.m.24 views

CVE-2021-43362 MedData HBYS 1.0 Remote SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...

9.9CVSS10AI score0.00618EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/09/29 1:50 a.m.22 views

CVE-2021-43361 MedData HBYS 1.0 Remote SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in MedData HBYS allows SQL Injection.This issue affects HBYS: from unspecified before 1.1...

9.9CVSS10AI score0.00618EPSS
SaveExploits0References1
Rows per page
Query Builder