Lucene search
+L

2358 matches found

NVD
NVD
•added 2022/08/25 10:15 p.m.•26 views

CVE-2022-36715

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

9.8CVSS0.00934EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/08/25 9:55 p.m.•41 views

CVE-2022-36715

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

10AI score0.00934EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/25 12:00 a.m.•14 views

CVE-2022-36715: Improper Neutralization of Special Elements used in an SQL Command

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/search.php...

9.8CVSS8.2AI score0.00934EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/08/25 12:00 a.m.•7 views

PT-2022-23578

Name of the Vulnerable Software and Affected Versions Library Management System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the name parameter at the "/admin/search.php" API endpoint. Recommendations For Library Management...

9.8CVSS0.00934EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/08/10 12:00 a.m.•65 views

Simple E-Learning System SQL Injection Vulnerability (CNVD-2023-11439)

Simple E-Learning System is a simple e-learning system from Carlo Montero's personal developer. simple E-Learning System is vulnerable to SQL injection due to a lack of validation of external input SQL statements in the search.php parameter searchPost. . An attacker could use this vulnerability t...

9.8CVSS4.5AI score0.00776EPSS
SaveExploits1References1
NVD
NVD
•added 2022/08/08 1:15 p.m.•37 views

CVE-2022-2698

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...

9.8CVSS0.00776EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/07 12:00 a.m.•11 views

CVE-2022-2698: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file search.php. The manipulation of the argument searchPost leads to sql injection. The attack can be launched remotely. The...

9.8CVSS8AI score0.00776EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/20 12:00 a.m.•12 views

CVE-2022-2490: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Simple E-Learning System 1.0. Affected is an unknown function of the file search.php. The manipulation of the argument classCode with the input 1'||SELECT 0x74666264 WHERE 5610=5610 AND SELECT 7504 FROMSELECT...

8.8CVSS7.5AI score0.00776EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/07/20 12:00 a.m.•10 views

PT-2022-16969

Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Learning System version 1.0 Description A critical vulnerability has been found in the SourceCodester Simple E-Learning System. The issue is related to an unknown function of the file search.php. The manipulation of the...

8.8CVSS0.00776EPSS
SaveExploits1References6
NVD
NVD
•added 2022/07/14 7:15 a.m.•40 views

CVE-2017-20129

A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...

9.8CVSS0.00568EPSS
SaveExploits0References1
Prion
Prion
•added 2022/07/14 7:15 a.m.•32 views

Sql injection

A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...

7.5CVSS9.7AI score0.00568EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/14 12:00 a.m.•10 views

CVE-2017-20129: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in LogoStore. It has been classified as critical. Affected is an unknown function of the file /LogoStore/search.php. The manipulation of the argument query with the input test' UNION ALL SELECT...

9.8CVSS7.9AI score0.00568EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/07/14 12:00 a.m.•8 views

PT-2022-7996

Name of the Vulnerable Software and Affected Versions LogoStore affected versions not specified Description A critical issue has been identified, allowing for SQL injection through the manipulation of the query argument in the /LogoStore/search.php file. This can be achieved by providing a specif...

9.8CVSS0.00568EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2022/07/14 12:00 a.m.•21 views

LogoStore SQL Injection Vulnerability

LogoStore is an online store from LogoStore Inc. in the United States. A security vulnerability exists in LogoStore that stems from an unknown function in the affected file /LogoStore/search.php. The function can lead to SQL injection, potentially launching an attack from a remote location. It is...

9.8CVSS8.4AI score0.00568EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/07/11 12:00 a.m.•57 views

atoms183 CMS SQL Injection Vulnerability

atoms183 CMS is a content management system by the individual developer of Дмитрий Глазвин. A SQL injection vulnerability exists in atoms183 CMS version 1.0, which can be exploited by an attacker to execute arbitrary commands on search.php via the Name, Fname, and ID parameters...

9.8CVSS10AI score0.01031EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/07/07 9:15 p.m.•18 views

CVE-2021-35283

SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...

9.8CVSS6.1AI score0.01031EPSS
SaveExploits1References1
Prion
Prion
•added 2022/07/07 9:15 p.m.•29 views

Sql injection

SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...

7.5CVSS9.9AI score0.01031EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/07/07 7:07 p.m.•36 views

CVE-2021-35283

SQL Injection vulnerability in productadmin.php in atoms183 CMS 1.0, allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to search.php...

10AI score0.01031EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/07/07 12:00 a.m.•5 views

PT-2022-10457

Name of the Vulnerable Software and Affected Versions atoms183 CMS version 1.0 Description The issue allows attackers to execute arbitrary commands via the Name, Fname, and ID parameters to the "search.php" endpoint. This enables attackers to potentially manipulate data or execute unauthorized...

9.8CVSS0.01031EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/25 12:00 a.m.•9 views

CVE-2022-29650: Improper Neutralization of Special Elements used in an SQL Command

Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php...

9.8CVSS8.2AI score0.01275EPSS
SaveExploits0References2
Rows per page
Query Builder