Lucene search
K

890 matches found

CNVD
CNVD
added 2022/11/25 12:0 a.m.28 views

Apartment Visitor Management System SQL Injection Vulnerability

Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. Apartment Visitor Management System v1.0 suffers from a SQL injection vulnerability, which originates from the lack of validity filtering of special characters in /avms/index.php,...

9.8CVSS9.5AI score0.00752EPSS
Exploits1References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.16 views

Billing System Project fetchOrderData.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in fetchOrderData.php against an externally entered SQL statement. An attacker...

9.8CVSS9.6AI score0.00871EPSS
Exploits0References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.20 views

Billing System Project getOrderReport.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the endDate parameter in getOrderReport.php against an externally entered SQL statement. An attacker...

9.8CVSS9.6AI score0.00871EPSS
Exploits0References1
CNVD
CNVD
added 2022/11/24 12:0 a.m.19 views

Billing System Project printOrder.php SQL Injection Vulnerability

Billing System Project is a billing system project by Mayuri K. Individual developer. Billing System Project v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the orderId parameter in printOrder.php against an externally entered SQL statement. An attacker cou...

9.8CVSS9.6AI score0.0089EPSS
Exploits0References1
CNVD
CNVD
added 2022/11/23 12:0 a.m.21 views

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87034)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the /asms/admin/mechanics/viewmechanic.php?id= component...

7.2CVSS7.3AI score0.00821EPSS
Exploits1References1
CNVD
CNVD
added 2022/11/23 12:0 a.m.24 views

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87035)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the /asms/admin/services/manageservice.php?id= component...

7.2CVSS7.3AI score0.00804EPSS
Exploits1References1
CNVD
CNVD
added 2022/11/23 12:0 a.m.25 views

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87037)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that originates in the /asms/classes/Master.php?f=deleteservice component that lacks validation of...

7.2CVSS7.2AI score0.00821EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.18 views

Wedding Planner wedding_details.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the id...

9.8CVSS9.6AI score0.00993EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.13 views

Online Pet Shop We App Master.php?f=delete_order SQL Injection Vulnerability

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App version 1.0, which originates from a lack of validation of externally entered SQL statements in the...

7.2CVSS7.5AI score0.00804EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.16 views

Wedding Planner client_edit.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

9.8CVSS9.6AI score0.01014EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.16 views

Wedding Planner client_assign.php SQL Injection Vulnerability

Wedding Planner is a wedding planner project by pushpam abhishek. Designed to provide users with an easy way to plan their wedding through a web application while using real data. Wedding Planner v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally...

8.8CVSS8.8AI score0.00826EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/28 12:0 a.m.21 views

Online Tours & Travels Management System update_tax.php SQL Injection Vulnerability

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...

7.2CVSS6.9AI score0.00854EPSS
Exploits1References1
CNVD
CNVD
added 2022/09/19 12:0 a.m.9 views

Shenzhen Lanning Software Co., Ltd. has SQL injection vulnerability in Lanning Intelligent Collaboration Platform

Shenzhen Lailing Software Co., Ltd. is a well-known large platform OA service provider and a leading knowledge management solution provider in China. It is a national high-tech enterprise specializing in knowledge-based consulting, software development, implementation and technical services for...

2AI score
Exploits0
CNVD
CNVD
added 2022/08/17 12:0 a.m.15 views

SQL Injection Vulnerability in the Integrated Management System of River Management System of Sichuang Technology Co.

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the integrated river management system of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from the database...

7.6AI score
Exploits0
CNVD
CNVD
added 2022/08/12 12:0 a.m.18 views

SQL injection vulnerability exists in RPCMS (CNVD-2022-64953)

RPCMS is a lightweight content management/blogging system based on PHP MYSQL.RPCMS is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive database information...

2.4AI score
Exploits0
CNVD
CNVD
added 2022/08/04 12:0 a.m.18 views

Pharmacy Management System edituser.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from a lack of validation of external input SQL in the id parameter of edituser.php statements. A...

9.8CVSS3.1AI score0.00789EPSS
Exploits1References1
CNVD
CNVD
added 2022/08/04 12:0 a.m.16 views

Pharmacy Management System getOrderReport.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multilingual pharmacy management system from the personal developer Mayuri K. A SQL injection vulnerability exists in Pharmacy Management System v1.0, which stems from the getOrderReport.php startDate parameter in getOrderReport.php lacks validation for extern...

9.8CVSS2.8AI score0.00789EPSS
Exploits1References1
CNVD
CNVD
added 2022/08/04 12:0 a.m.28 views

Pharmacy Management System getsalereport.php SQL Injection Vulnerability

Pharmacy Management System MPMS is a multi-lingual pharmacy management system by Mayuri K. Personal developer. version v1.0 of Pharmacy Management System is vulnerable to SQL injection, which stems from the startDate parameter in getsalereport.php parameter in getsalereport.php lacks validation f...

9.8CVSS4.7AI score0.00789EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/18 12:0 a.m.25 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77045)

Product Show Room Site is a kind of product show room website by Carlo Montero's personal developer. product show room site v1.0 version exists SQL injection vulnerability, the vulnerability originates from the existence of the id parameter in /psrs/?p=products/viewproduct&id SQL injection, an...

8.8CVSS5.2AI score0.00795EPSS
Exploits1References1
CNVD
CNVD
added 2022/07/15 12:0 a.m.19 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77046)

Product Show Room Site is a product showroom website from Carlo Montero's personal developer. Product Show Room Site v1.0 is vulnerable to SQL injection, which originates from a SQL injection in the /psrs/classes/Master.php?f=deleteproduct The vulnerability is caused by SQL injection of the id...

7.2CVSS5.6AI score0.00784EPSS
Exploits1References1
Rows per page
Query Builder