Lucene search
+L

894 matches found

CNVD
CNVD
•added 2022/06/20 12:00 a.m.•32 views

Sourcecodester Hospital Patient Records Management System SQL注入漏洞(CNVD-2022-48756)

Sourcecodester Hospital Patient Records Management System is a web-based application that provides hospitals with an automated platform to store and manage their patient records. Management System is vulnerable to a SQL injection vulnerability that originates in the...

7.2CVSS2.1AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•57 views

Online Fire Reporting System SQL Injection Vulnerability (CNVD-2022-55737)

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which stems from a GET parameter in /report/list.php that lacks validation for external The vulnerability is caused...

6.5CVSS4.1AI score0.00937EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•68 views

Directory Management System SQL Injection Vulnerability

Directory Management System is a directory management system. A SQL injection vulnerability exists in Directory Management System v1.0, which stems from a lack of validation of the fullname parameter in add-directory.php against an externally-entered SQL statement. An attacker can exploit this...

9.8CVSS9.9AI score0.01673EPSS
SaveExploits2References1
CNVD
CNVD
•added 2022/06/20 12:00 a.m.•128 views

Fast Food Ordering System SQL Injection Vulnerability (CNVD-2022-48950)

Fast Food Ordering System, a fast food ordering system from Carlo Montero's personal developer, is vulnerable to a SQL injection vulnerability in version 1.0 of Fast Food Ordering System, which originates in /ffos/admin/categories/viewcategory. php?id=The page lacks validation for external input...

7.2CVSS4.4AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•53 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68958)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexam.php?id=The page lacks validation for external input SQL statements, which ca...

6.5CVSS2.6AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•97 views

Web Based Quiz System SQL注入漏洞

Web Based Quiz System is an application used for a simple online based project. Web Based Quiz System v1.0 is vulnerable to SQL injection, which stems from the lack of validation of external input SQL statements in the eid parameter of welcome.php. An attacker could use this vulnerability to...

8.8CVSS2.7AI score0.01073EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•90 views

YouDianCMS SQL Injection Vulnerability (CNVD-2022-59019)

YouDianCMS is a website CMS. A SQL injection vulnerability exists in YouDianCMS v9.5.0, which originates from the lack of validation of the IdList parameter at /App/Lib/Action/Home/ApiAction.class.php against external SQL input. This vulnerability can be exploited to execute illegal SQL commands ...

9.8CVSS9.9AI score0.01079EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•73 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68965)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...

6.5CVSS2.5AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•64 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68964)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getteacherprofile.php?myindex=The page lacks validation for external input SQL...

6.5CVSS2.6AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•67 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68956)

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, is a SQL injection vulnerability in version v1.0 of Advanced School Management System, which originates from /school/model/ getclassroom.php?id=The page lacks validation for external input SQL statements,...

6.5CVSS2.9AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•56 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68957)

Advanced School Management System, a school management system by Angel Jude Reyes Suarez, a personal developer, has a SQL injection vulnerability in version v1.0, which originates in /school/model/ getevents.php?eventid=The page lacks validation for external input SQL statements, which could be...

6.5CVSS4.4AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•67 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68955)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getadminprofile.php?myindex=The page lacks validation for external input SQL...

6.5CVSS2.6AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•62 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68954)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getteacher.php?id=The page lacks validation for external input SQL statements, which...

6.5CVSS2.6AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/17 12:00 a.m.•61 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68963)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getsubjectrouting.php?id=The page lacks validation for external input SQL statements...

6.5CVSS2.6AI score0.00956EPSS
SaveExploits1Affected Software1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•30 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77048)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to SQL injection, which originates from the /psrs/admin/?page=products/manageproduct& id= page has SQL injection problem, attackers can use the...

7.2CVSS5.4AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•49 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77050)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/viewfield.php?id=page. SQL injection problem, an attacker can use this vulnerabilit...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•64 views

Product Show Room Site SQL Injection Vulnerability (CNVD-2022-77049)

Product Show Room Site is a product showroom site from Carlo Montero's personal developer. version 1.0 of Product Show Room Site is vulnerable to a SQL injection vulnerability that originates in /psrs/admin/fields/managefield.php?id=page. SQL injection problem, an attacker can use this...

7.2CVSS5.5AI score0.00956EPSS
SaveExploits1References1
CNVD
CNVD
•added 2022/06/15 12:00 a.m.•72 views

Amodat Mobile Application Gateway SQL Injection Vulnerability

Amodat Mobile Application Gateway, a mobile application gateway from Amodat Israel, is vulnerable to a SQL injection vulnerability in versions prior to 7.12.00.09, which stems from a lack of validation of external input by agentid SQL statement validation. An attacker could use this vulnerability...

7.2CVSS3.7AI score0.0044EPSS
SaveExploits0References1
OSV
OSV
•added 2022/06/14 3:15 a.m.•14 views

CVE-2022-31447

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

7.5CVSS5.8AI score0.01232EPSS
SaveExploits1References2
Prion
Prion
•added 2022/06/14 3:15 a.m.•29 views

Xxe

An XML external entity XXE injection vulnerability in Magicpin v3.4 allows attackers to access sensitive database information via a crafted SVG file...

5CVSS7.3AI score0.01232EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder