Lucene search
K

216160 matches found

CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

Code-Projects Employee Management System SQL注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 suffers from a SQL injection vulnerability that originates from the manipulation of an unknown function in the /changepassemp.php file, which...

6.5CVSS6.6AI score0.00246EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.5 views

Code-Projects Employee Management System SQL注入漏洞

Code-Projects Employee Management System is a Code-Projects open source employee management system . Code-Projects Employee Management System version 1.0 has a SQL injection vulnerability , the vulnerability stems from the wrong operation of the parameter ID in the file...

6.5CVSS6.7AI score0.00246EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/25 12:0 a.m.7 views

PT-2026-43217

Twitter-Clone 1 contains a SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the name parameter. Attackers can submit crafted payloads to the search.php endpoint to extract database information including username...

8.8CVSS6.2AI score0.00337EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

twitter-clone SQL注入漏洞

twitter-clone is an application by Fiffe Individual Developers. twitter-clone uses + Vue 3 + light to go development + TailwindCSS + PostgreSQL + recapitulation Twitter-Clone version 1 suffers from a SQL injection vulnerability that stems from the injection of SQL code via the userid parameter in...

8.8CVSS5.9AI score0.00309EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

Collectric CMU SQL注入漏洞

The Collectric CMU is a smart meter device from Collectric in the Netherlands that supports power metering with supporting communication extensions. A SQL injection vulnerability exists in Collectric CMU version 1.0, which stems from the presence of Boolean-based blind SQL injection in the lang...

8.8CVSS5.9AI score0.0039EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.9 views

Joomla! Responsive Portfolio SQL注入漏洞

Joomla! Responsive Portfolio is a Joomla! open source Joomla website portfolio extension. A SQL injection vulnerability exists in Joomla! Responsive Portfolio version 1.6.1, which stems from SQL injection of multiple filter parameters, which could lead to an authenticated attacker injecting...

7.1CVSS5.9AI score0.00284EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.10 views

Tiandy Easy7 Integrated Management Platform SQL注入漏洞

Tiandy Easy7 Integrated Management Platform is a video surveillance integrated management platform from China Tiandy Company. A SQL injection vulnerability exists in Tiandy Easy7 Integrated Management Platform version 7.17.0, which originates from the operation of the parameter strTBName in the...

7.5CVSS7.2AI score0.00319EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.6 views

SB Admin SQL注入漏洞

SB Admin is a Bootstrap based open source admin backend template by Yash Pokharna individual developer. SB Admin suffers from a SQL injection vulnerability that stems from the operation of the parameter User in the file /success.php, which could lead to SQL injection...

7.5CVSS7.2AI score0.00319EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.6 views

SB Admin SQL注入漏洞

SB Admin is a Bootstrap based open source admin backend template by Yash Pokharna individual developer. SB Admin has a SQL injection vulnerability that originates from the parameter FIRSTNAME/LastName/EMAIL operation of the function confirmloggedin in the file studenttrans.php, which could lead t...

7.5CVSS7.2AI score0.00319EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.7 views

SB Admin SQL注入漏洞

SB Admin is a Bootstrap based open source admin backend template by Yash Pokharna individual developer. SB Admin suffers from an SQL injection vulnerability that stems from the operation of the function confirmloggedin on the parameter ID in the file /studentdel.php, which could lead to SQL...

7.5CVSS7.2AI score0.00319EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.8 views

WordPress plugin JetEngine SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injection...

9.3CVSS5.9AI score0.00372EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/05/25 12:0 a.m.8 views

WordPress plugin Unlimited Elements For Elementor SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, with the ability to host personal blog sites on PHP and MySQL based servers.WordPress...

8.5CVSS5.9AI score0.00342EPSS
Exploits0References1
Snyk
Snyk
added 2026/05/24 8:48 p.m.10 views

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection via the AddressRepository::getSqlQuery method that constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore...

8.2CVSS5.8AI score0.00327EPSS
Exploits0References2
GithubExploit
GithubExploit
added 2026/05/24 6:37 p.m.71 views

Exploit for CVE-2025-13673

CVE-2025-13673 — Tutor LMS SQL Injection Lab Unauthenticated...

7.5CVSS5.9AI score0.0035EPSS
Exploits1
GithubExploit
GithubExploit
added 2026/05/24 6:32 p.m.90 views

Exploit for SQL Injection in Cmsmadesimple Cms_Made_Simple

CMS Made Simple CVE-2019-9053 Exploit Python 3 Python 3 com...

8.1CVSS7.3AI score0.55958EPSS
Exploits37
NVD
NVD
added 2026/05/24 2:16 p.m.12 views

CVE-2026-9383

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS0.00319EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/24 1:15 p.m.8 views

CVE-2026-9383

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS6.8AI score0.00319EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2026/05/24 1:15 p.m.8 views

EUVD-2026-31595

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS6.8AI score0.00319EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/05/24 1:15 p.m.7 views

CVE-2026-9383 itsourcecode Electronic Judging System login.php sql injection

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /intrams/admin/login.php. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the...

7.5CVSS5.5AI score0.00319EPSS
Exploits0References5
CVE
CVE
added 2026/05/24 1:15 p.m.12 views

CVE-2026-9383

The CVE affects itsourcecode Electronic Judging System 1.0. The vulnerability exists in /intrams/admin/login.php where manipulation of the Username parameter enables SQL injection. This allows remote exploitation, as stated. The exploit is public. No additional remediation details are provided in...

7.5CVSS6.8AI score0.00319EPSS
Exploits0References5
Rows per page
Query Builder