Lucene search
+L

6980 matches found

CNNVD
CNNVD
added 2022/09/02 12:00 a.m.14 views

Expense Management System SQL注入漏洞

Expense Management System is an expense management system. version v1.0 of Expense Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in the id parameter of its /Home/debitcreditp component. An attacker could use this...

7.2CVSS7.7AI score0.00777EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/02 12:00 a.m.8 views

Online Food Ordering System SQL注入漏洞

Online Food Ordering System is an online food ordering system. Online Food Ordering System suffers from a SQL injection vulnerability that can be exploited by an attacker to perform SQL injection via the component /dish .php?resid=...

9.8CVSS8AI score0.00965EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2022/09/01 2:21 p.m.8 views

mariadb: server crash at my_decimal::operator=

A flaw was found in MariaDB. The component, mydecimal::operator=, allows attackers to cause a denial of service DoS via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02264EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2022/09/01 2:21 p.m.18 views

mariadb: use-after-poison when complex conversion is involved in blob

A flaw was found in the MariaDB Server, where it contains a use-after-free in the component, Itemfuncin::cleanup. This issue is exploited via specially crafted SQL statements, affecting availability...

7.5CVSS7.3AI score0.02337EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/01 12:00 a.m.10 views

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A security vulnerability exists in the v1.0 version of Simple Task Scheduling System, which contains a SQL injection vulnerability via the id parameter in /schedules/manageschedule.php...

7.2CVSS7.3AI score0.00878EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/30 4:05 a.m.7 views

CVE-2022-38118

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service...

8.8CVSS7.4AI score0.01417EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/30 12:15 a.m.7 views

CVE-2022-36712

Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /staff/studentdetails.php...

9.8CVSS5.8AI score0.00804EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.11 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...

9.8CVSS8.5AI score0.00804EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.8 views

Oaklouds SQL注入漏洞

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. Oaklouds suffers from a SQL injection vulnerability that stems from insufficient validation of user input. A remote...

8.8CVSS8AI score0.01417EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.14 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the...

9.8CVSS8.5AI score0.00804EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/30 12:00 a.m.8 views

Library Management System SQL注入漏洞

Library Management System is a library management system with QR code attendance and automatic library card generation by King Albaracin Personal Developer. A security vulnerability exists in Library Management System v1.0, which was discovered to contain an SQL injection vulnerability via the MI...

9.8CVSS8.5AI score0.00804EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.10 views

The vulnerability of the /librarian/bookdetails.php component of the Library Management System allows a malicious individual to execute arbitrary SQL queries.

The vulnerability of the /librarian/bookdetails.php component of the Library Management System lies in the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

7.5CVSS5.9AI score
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/08/29 12:00 a.m.8 views

Ingredients Stock Management System SQL注入漏洞

Ingredients Stock Management System is an ingredient stock management system from Carlo Montero's personal developer. v1.0 of Ingredients Stock Management System is vulnerable to SQL injection, which originates from the /admin/?page= user/manageuser&id= is missing validation for external input SQ...

8.8CVSS7.7AI score0.00865EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/08/28 11:15 p.m.5 views

CVE-2022-36705

Ingredients Stock Management System v1.0 was discovered to contain a SQL injection vulnerability via the Id parameter at /stocks/managewaste.php...

9.8CVSS7.4AI score0.00909EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/27 12:00 a.m.10 views

Fast Food Ordering System SQL注入漏洞

Fast Food Ordering System is a fast food ordering system by the individual developer Carlo Montero. Fast Food Ordering System suffers from an SQL injection vulnerability that originates from an unknown function in its component ffos/admin/reports/index.php that operates on the parameter date, whi...

8.8CVSS8.3AI score0.00625EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2022/08/26 1:15 p.m.5 views

CVE-2022-36678

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

9.8CVSS7.4AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/26 1:15 p.m.10 views

CVE-2022-36678

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletecategory...

9.8CVSS5.8AI score0.00909EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/26 1:15 p.m.10 views

CVE-2022-36682

Simple Task Scheduling System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletestudent...

9.8CVSS5.8AI score0.00909EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/08/26 12:00 a.m.11 views

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which stems from a security issue with the id parameter in /classes/Master.php?f=deleteaccount...

9.8CVSS7.8AI score0.00909EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/08/26 12:00 a.m.7 views

Simple Task Scheduling System SQL注入漏洞

Simple Task Scheduling System is a simple task scheduling system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Simple Task Scheduling System v1.0, which originates from a security issue with the id parameter in /admin/?page=user/manageuser...

9.8CVSS7.8AI score0.0089EPSS
SaveExploits1References2
Rows per page
Query Builder