Lucene search
+L

81 matches found

Positive Technologies
Positive Technologies
•added 2022/08/09 12:00 a.m.•19 views

PT-2022-18343 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical issue has been found in the SourceCodester Gym Management System, affecting an unknown functionality of the file /mygym/admin/login.php. The...

9.8CVSS9.7AI score0.00754EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/09 12:00 a.m.•7 views

CVE-2022-2728: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /mygym/admin/index.php. The manipulation of the argument edittran leads to sql injection. The attack may be launched remotely. The...

9.8CVSS8AI score0.00754EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/08 1:15 p.m.•35 views

CVE-2022-2708

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

9.8CVSS0.00552EPSS
SaveExploits0References1
NVD
NVD
•added 2022/08/08 1:15 p.m.•30 views

CVE-2022-2703

A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS0.00754EPSS
SaveExploits1References2
NVD
NVD
•added 2022/08/08 1:15 p.m.•27 views

CVE-2022-2700

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS0.00748EPSS
SaveExploits1References2
Prion
Prion
•added 2022/08/08 1:15 p.m.•33 views

Sql injection

A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

6.5CVSS8.9AI score0.00754EPSS
SaveExploits1References2
Prion
Prion
•added 2022/08/08 1:15 p.m.•31 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input email protected' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

7.5CVSS9.4AI score0.00552EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/08/08 12:50 p.m.•43 views

CVE-2022-2708 SourceCodester Gym Management System login.php sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

5.5CVSS9.7AI score0.00552EPSS
SaveExploits0References1
CVE
CVE
•added 2022/08/08 12:25 p.m.•66 views

CVE-2022-2700

CVE-2022-2700 affects SourceCodester Gym Management System, via the GET Parameter Handler’s day parameter. The vulnerability allows remote SQL injection, with the exploit publicly disclosed. Impact is described as high (CVE data via NVD). Connected sources indicate no fix/version details are prov...

8.8CVSS6.9AI score0.00748EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•5 views

CVE-2022-2703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS7.4AI score0.00754EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•7 views

CVE-2022-2700: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

8.8CVSS7.4AI score0.00748EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/08 12:00 a.m.•12 views

CVE-2022-2708: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument userlogin with the input [email protected]' OR SELECT 9084 FROMSELECT COUNT,CONCAT0x7178767871,SELECT...

9.8CVSS7.8AI score0.00552EPSS
SaveExploits0References2
NVD
NVD
•added 2022/08/06 7:15 a.m.•29 views

CVE-2022-2687

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument userpass leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS0.00754EPSS
SaveExploits1References2
Prion
Prion
•added 2022/08/06 7:15 a.m.•24 views

Sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument userpass leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

7.5CVSS9.7AI score0.00754EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2022/08/06 6:25 a.m.•34 views

CVE-2022-2687 SourceCodester Gym Management System sql injection

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument userpass leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

6.3CVSS10AI score0.00754EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/08/06 12:00 a.m.•17 views

SourceCodester Gym Management System SQL注入漏洞

SourceCodester Gym Management System is an American SourceCodester company's gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, databas...

9.8CVSS8.3AI score0.00754EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/08/06 12:00 a.m.•18 views

PT-2022-18117 · Sourcecodester · Sourcecodester Gym Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Gym Management System affected versions not specified Description: A critical vulnerability was found in the SourceCodester Gym Management System, allowing for SQL injection through the manipulation of the user pass argument...

9.8CVSS9.7AI score0.00754EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/06 12:00 a.m.•10 views

CVE-2022-2687: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. Affected is an unknown function. The manipulation of the argument userpass leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...

9.8CVSS8AI score0.00754EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2020/12/02 12:00 a.m.•19 views

Sourcecodester SourceCodester Gym Management System SQL Injection Vulnerability

Sourcecodester SourceCodester Gym Management System is an American SourceCodester Sourcecodester company's a gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness...

9.8CVSS7.3AI score0.02594EPSS
SaveExploits1References4
OSV
OSV
•added 2020/11/17 9:15 p.m.•17 views

CVE-2020-28129

Stored Cross-site scripting XSS vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php?page=packages via vulnerable fields 'Package Name' and 'Description'...

6.1CVSS6.5AI score0.00967EPSS
SaveExploits1References2
Rows per page
Query Builder