Lucene search
+L

3636 matches found

Prion
Prion
added 2020/12/24 3:15 p.m.24 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29189. Reason: This candidate is a reservation duplicate of CVE-2020-29189. Notes: All CVE users should reference CVE-2020-29189 instead of this candidate. All references and descriptions in this candidate have been removed t...

8AI score0.01865EPSS
SaveExploits1
Check Point Advisories
Check Point Advisories
added 2020/12/22 12:00 a.m.21 views

Online Bus Ticket Reservation Project SQL Injection (CVE-2020-35378)

An SQL injection vulnerability exists in Online Bus Ticket Reservation. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.4AI score0.02025EPSS
SaveExploits1
Prion
Prion
added 2020/12/17 2:15 a.m.26 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.3AI score0.06263EPSS
SaveExploits2
NVD
NVD
added 2020/12/14 4:15 p.m.15 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

9.8CVSS10AI score0.02025EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/14 4:15 p.m.8 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

9.8CVSS6.1AI score0.02025EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/12/14 3:44 p.m.22 views

CVE-2020-35378

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields...

10AI score0.02025EPSS
SaveExploits1References1
CVE
CVE
added 2020/12/14 3:44 p.m.50 views

CVE-2020-35378

CVE-2020-35378 affects Online Bus Ticket Reservation 1.0. The login page is vulnerable to SQL injection via username/password fields, enabling arbitrary SQL execution and authentication bypass. Root cause appears to be lack of input validation on SQL statements. Affected version: 1.0. No remediat...

9.8CVSS10AI score0.02025EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2020/12/14 12:00 a.m.14 views

Sourcecodester Online Bus Ticket Reservation SQL注入漏洞

Sourcecodester Online Bus Ticket Reservation is an online bus ticketing platform from Sourcecodester USA. A SQL injection vulnerability exists in Online Bus Ticket Reservation version 1.0, which stems from a database-based application that lacks validation of externally-entered SQL statements. An...

9.8CVSS7.6AI score0.02025EPSS
SaveExploits1References2
Prion
Prion
added 2020/12/11 4:15 p.m.22 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.3AI score0.06263EPSS
SaveExploits2
Prion
Prion
added 2020/12/11 3:15 p.m.22 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2019-5021. Reason: This candidate is a reservation duplicate of CVE-2019-5021. Notes: All CVE users should reference CVE-2019-5021 instead of this candidate. All references and descriptions in this candidate have been removed to...

9.3AI score0.06263EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2020/12/08 12:00 a.m.222 views

Online Bus Ticket Reservation 1.0 SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2020/12/08 12:00 a.m.390 views

Online Bus Ticket Reservation 1.0 - SQL Injection

Exploit Title: Online Bus Ticket Reservation 1.0 - SQL Injection Date: 2020-12-07 Exploit Author: Sakshi Sharma Vendor Homepage: https://www.sourcecodester.com/php/5012/online-bus-ticket-reservation-using-phpmysql.html Software Link:...

5.3AI score
SaveExploits0
Prion
Prion
added 2020/12/07 10:15 p.m.28 views

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-29136. Reason: This candidate is a reservation duplicate of CVE-2020-29136. Notes: All CVE users should reference CVE-2020-29136 instead of this candidate. All references and descriptions in this candidate have been removed t...

6.5AI score0.01193EPSS
SaveExploits0
CVE
CVE
added 2020/12/07 9:54 p.m.71 views

CVE-2020-27641

CVE-2020-27641 is a reservation duplicate of CVE-2020-29136; all references/descriptions for this candidate were removed to prevent usage. Connected documents (e.g., CVE-2020-29136) describe a brute-force 2FA bypass in cPanel before 90.0.17.

6.4AI score
SaveExploits0
NVD
NVD
added 2020/12/04 6:15 a.m.25 views

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

5.5CVSS5.5AI score0.00654EPSS
SaveExploits0References1
Prion
Prion
added 2020/12/04 6:15 a.m.22 views

Design/Logic Flaw

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

4.3CVSS5.5AI score0.00654EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/04 5:49 a.m.29 views

CVE-2020-29561

An issue was discovered in SonicBOOM riscv-boom 3.0.0. For LR, it does not avoid acquiring a reservation in the case where a load translates successfully but still generates an exception...

5.5AI score0.00654EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2020/12/04 12:00 a.m.12 views

Berkeley Riscv-boom Security Vulnerability

The Berkeley Riscv-boom is a University of Berkeley USA for architectural research based on the RV64GC RISC-V kernel written in the Chisel hardware construction language. A security vulnerability exists in SonicBOOM riscv-boom version 3.0.0, which stems from the fact that for LR, it does not avoi...

5.5CVSS6.1AI score0.00654EPSS
SaveExploits0References2
NVD
NVD
added 2020/12/02 10:15 p.m.23 views

CVE-2020-29284

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

9.8CVSS9.7AI score0.06093EPSS
SaveExploits1References3
Prion
Prion
added 2020/12/02 10:15 p.m.17 views

Sql injection

The file view-chair-list.php in Multi Restaurant Table Reservation System 1.0 does not perform input validation on the tableid parameter which allows unauthenticated SQL Injection. An attacker can send malicious input in the GET request to /dashboard/view-chair-list.php?tableid= to trigger the...

7.5CVSS9.7AI score0.06093EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder