Lucene search
+L

1498 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•5 views

CVE-2021-40596: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in sourcecodester Online Learning System v2 by oretnom23, allows attackers to execute arbitrary SQL commands via the facultyid parameter...

9.8CVSS6.3AI score0.01254EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•5 views

CVE-2021-43420: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter...

9.8CVSS6.4AI score0.01289EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/24 12:00 a.m.•8 views

CVE-2021-46451: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the loadfile function...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/21 8:15 p.m.•21 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01356EPSS
SaveExploits1References2Affected Software1
NVD
NVD
•added 2022/01/21 4:15 p.m.•28 views

CVE-2021-46201

An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node...

10CVSS0.01556EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•3 views

CVE-2021-40595: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

9.8CVSS6.3AI score0.01356EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•5 views

CVE-2021-46308: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter...

10CVSS5.9AI score0.01556EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/21 12:00 a.m.•2 views

CVE-2021-46201: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node...

10CVSS5.8AI score0.01556EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/20 7:15 p.m.•11 views

CVE-2021-44090

An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter...

9.8CVSS7.4AI score0.0111EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/01/20 12:00 a.m.•11 views

Online Reviewer System SQL注入漏洞

Online Reviewer System is a software application. An Online Reviewer System. A SQL injection vulnerability exists in Online Reviewer System, which originates from the product's password parameter not effectively filtering user input data for special characters. The vulnerability can be exploited ...

9.8CVSS8.7AI score0.0111EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•8 views

CVE-2021-44090: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter...

9.8CVSS5.8AI score0.0111EPSS
SaveExploits1References2
OSV
OSV
•added 2022/01/10 2:10 p.m.•19 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References4
NVD
NVD
•added 2022/01/10 2:10 p.m.•39 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS0.02761EPSS
SaveExploits1References4
Prion
Prion
•added 2022/01/10 2:10 p.m.•26 views

Sql injection

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

7.5CVSS10AI score0.02761EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2022/01/09 6:57 p.m.•43 views

CVE-2021-45334

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

10AI score0.02761EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/09 12:00 a.m.•4 views

CVE-2021-45334: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Online Thesis Archiving System 1.0 is vulnerable to SQL Injection. An attacker can bypass admin authentication and gain access to admin panel using SQL Injection...

9.8CVSS5.8AI score0.02761EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
•added 2021/12/15 12:00 a.m.•58 views

Sourcecodester Online Event Booking and Reservation System SQL Injection (CVE-2021-42667)

An SQL injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.3AI score0.16046EPSS
SaveExploits3
NVD
NVD
•added 2021/11/15 4:15 p.m.•21 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

9.8CVSS0.09985EPSS
SaveExploits4References5
Cvelist
Cvelist
•added 2021/11/15 3:57 p.m.•36 views

CVE-2021-42580

Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file /admin/login.php and authenticated file upload in Master.php file , we can craft these two vunlerablities to get unauthenticated remote command execution...

10AI score0.09985EPSS
SaveExploits4References5
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•13 views

Sourcecodester Pisay Online E-Learning System SQL注入漏洞

Sourcecodester Online Learning System is an online e-learning system based on PHP and MySQL. sourcecodester Online Learning System has a SQL injection vulnerability in v2.0, which stems from the application's lack of validation of external input SQL statements. An attacker can use this...

9.8CVSS6.2AI score0.09985EPSS
SaveExploits4References9
Rows per page
Query Builder