Lucene search
+L

4250 matches found

Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.6 views

PT-2024-26456 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=delete item. Manipulating the id argument can result in SQL injection...

5.3CVSS7.3AI score0.00237EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.8 views

PT-2024-26449 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file "/admin/?page=borrow/view borrow". Manipulating the argument id can result in SQL injection...

9.8CVSS7.3AI score0.00531EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.4 views

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/page=borrow/viewborrow, which leads to SQL injection via the parameter id...

9.8CVSS8.1AI score0.00531EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.4 views

Dino Physics School Assistant SQL Injection Vulnerability

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/Master.php that causes SQL injection via the parameter id...

5.3CVSS8.2AI score0.00237EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.8 views

PT-2024-26452 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Users.php?f=save. Manipulating the id argument can result in improper authorization...

9.8CVSS6.4AI score0.00555EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.5 views

Dino Physics School Assistant 安全漏洞

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from an authorization error vulnerability in the parameter id of the file classes/Users.php...

9.8CVSS6.8AI score0.00555EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.7 views

PT-2024-26447 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /admin/category/view category.php. Manipulating the argument id can result in SQL injection...

9.8CVSS7.4AI score0.00538EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.8 views

PT-2024-26455 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered that impacts an unidentified code within the file /classes/Master.php?f=save item. Manipulating the id argument can result in SQL injection...

6.3CVSS7.3AI score0.00366EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.4 views

Dino Physics School Assistant Security Breach

Dino Physics School Assistant is an application. A security vulnerability exists in Dino Physics School Assistant version 2.3, which stems from a SQL injection vulnerability in the parameter id of the file /classes/Master.php...

9.8CVSS7.9AI score0.00654EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.6 views

Dino Physics School Assistant SQL注入漏洞

Dino Physics School Assistant is an application. A SQL injection vulnerability exists in Dino Physics School Assistant version 2.3, which originates from unrecognized code in /admin/category/viewcategory.php, which leads to SQL injection via the parameter id...

9.8CVSS8.1AI score0.00538EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.12 views

PT-2024-26453 · Unknown · Diño Physics School Assistant

Name of the Vulnerable Software and Affected Versions: Diño Physics School Assistant version 2.3 Description: A vulnerability has been discovered in the software, impacting an unidentified code within the file /classes/Master.php?f=save category. Manipulating the argument id can result in SQL...

9.8CVSS7.3AI score0.00654EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/05/30 12:0 a.m.5 views

Dino Physics School Assistant 跨站脚本漏洞

Dino Physics School Assistant is an application. A cross-site scripting vulnerability exists in Dino Physics School Assistant version 2.3, which stems from unrecognized code in /classes/SystemSettings.php that leads to a cross-site scripting attack via the parameter name...

5.4CVSS6.2AI score0.00261EPSS
SaveExploits0References3
OSV
OSV
added 2024/05/28 6:15 p.m.5 views

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

8.1CVSS6.1AI score0.00438EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/28 6:15 p.m.21 views

CVE-2024-33402

A SQL injection vulnerability in /model/approvepettycash.php in campcodes Complete Web-Based School Management System 1.0 allows attacker to execute arbitrary SQL commands via the id parameter...

8.1CVSS8.2AI score0.00438EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/28 4:15 p.m.24 views

CVE-2024-33808

A SQL injection vulnerability in /model/gettimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

9.8CVSS8.2AI score0.0051EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/28 4:15 p.m.33 views

CVE-2024-33807

A SQL injection vulnerability in /model/getteachertimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the grade parameter...

5.4CVSS8.1AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
added 2024/05/28 4:15 p.m.24 views

CVE-2024-33801

A SQL injection vulnerability in /model/getsubjectrouting.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

9.8CVSS8.2AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/28 4:15 p.m.5 views

CVE-2024-33806

A SQL injection vulnerability in /model/getgrade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/28 4:15 p.m.8 views

CVE-2024-33800

A SQL injection vulnerability in /model/getstudent1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
added 2024/05/28 4:15 p.m.3 views

CVE-2024-33801

A SQL injection vulnerability in /model/getsubjectrouting.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

9.8CVSS6.1AI score0.0051EPSS
SaveExploits1References1
Rows per page
Query Builder