Lucene search
+L

48 matches found

CNNVD
CNNVD
added 2024/03/28 12:00 a.m.7 views

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application by the individual developer Carlo Montero. It is used to provide companies with possible members to apply for plans that provide certain services. An SQL injection vulnerability exists in Simple Subscription...

8.8CVSS7AI score0.00675EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/03/28 12:00 a.m.10 views

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application by the individual developer Carlo Montero. It is used to provide companies with possible members to apply for plans that offer certain services. An SQL injection vulnerability exists in Simple Subscription...

8.8CVSS7AI score0.00675EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.13 views

PT-2024-23214 · Sourcecodester · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Subscription Website version 1.0 Description: A critical vulnerability was found in the SourceCodester Simple Subscription Website, affecting an unknown functionality of the file manage plan.php. The manipulation of the ...

8.8CVSS8.4AI score0.00675EPSS
SaveExploits1References9
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.8 views

PT-2024-23209 · Sourcecodester · Sourcecodester Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Subscription Website version 1.0 Description: A critical vulnerability has been found in the software. The issue is related to the manipulation of the title argument, which leads to SQL injection. This can be exploited...

8.8CVSS8AI score0.00675EPSS
SaveExploits1References8
ATTACKERKB
ATTACKERKB
added 2022/03/21 11:15 p.m.3 views

CVE-2022-26283

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

9.8CVSS5.9AI score0.01557EPSS
SaveExploits1References2
OSV
OSV
added 2022/03/21 11:15 p.m.8 views

CVE-2022-26285

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

9.8CVSS7.3AI score0.02029EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/03/21 11:15 p.m.4 views

CVE-2022-26285

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

9.8CVSS5.9AI score0.02029EPSS
SaveExploits1References2
NVD
NVD
added 2022/03/21 11:15 p.m.21 views

CVE-2022-26283

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

9.8CVSS0.01557EPSS
SaveExploits1References1
Prion
Prion
added 2022/03/21 11:15 p.m.22 views

Sql injection

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the viewplan endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

7.5CVSS9.6AI score0.01557EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/03/21 11:15 p.m.20 views

Sql injection

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests...

7.5CVSS9.6AI score0.02029EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/03/21 12:00 a.m.13 views

PT-2022-17765 · Unknown · Simple Subscription Website

Name of the Vulnerable Software and Affected Versions: Simple Subscription Website version 1.0 Description: The issue allows attackers to dump the application's database via crafted HTTP requests. This is made possible by a SQL injection vulnerability via the id parameter in the "view plan"...

9.8CVSS8.2AI score0.01557EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/03/21 12:00 a.m.10 views

Simple Subscription Website SQL注入漏洞

Simple Subscription Website is an open source, web-based simple subscription application from Carlo Montero's personal developer. Used to provide companies with possible members to apply for plans that offer certain services, Simple Subscription Website is vulnerable to SQL injection, which can b...

9.8CVSS5.8AI score0.02029EPSS
SaveExploits1References2
Exploit DB
Exploit DB
added 2021/11/15 12:00 a.m.406 views

Simple Subscription Website 1.0 - SQLi Authentication Bypass

Exploit Title: Simple Subscription Website 1.0 - SQLi Authentication Bypass Exploit Author: Daniel Haro Dirox Vendor Homepage: https://www.sourcecodester.com/php/15013/simple-subscription-website-admin-panel-php-and-sqlite-source-code.html Software Link:...

9.8CVSS8.4AI score0.04729EPSS
SaveExploits4
CNVD
CNVD
added 2021/11/04 12:00 a.m.71 views

Sourcecodester Simple Subscription Website SQL Injection Vulnerability

Simple Subscription Website is a web-based application. SourceCodester Simple Subscription Website 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via login...

9.8CVSS3.4AI score0.04729EPSS
SaveExploits4References1
NVD
NVD
added 2021/11/03 7:15 p.m.42 views

CVE-2021-43140

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

9.8CVSS0.04729EPSS
SaveExploits4References3
OSV
OSV
added 2021/11/03 7:15 p.m.13 views

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

6.1CVSS6.4AI score0.01442EPSS
SaveExploits1References4
OSV
OSV
added 2021/11/03 7:15 p.m.11 views

CVE-2021-43140

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

9.8CVSS7.4AI score0.04729EPSS
SaveExploits4References3
NVD
NVD
added 2021/11/03 7:15 p.m.30 views

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

6.1CVSS0.01442EPSS
SaveExploits1References4
Prion
Prion
added 2021/11/03 7:15 p.m.17 views

Sql injection

SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login...

7.5CVSS9.8AI score0.04729EPSS
SaveExploits4References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/11/03 7:15 p.m.125 views

CVE-2021-43141

Cross Site Scripting XSS vulnerability exists in Sourcecodester Simple Subscription Website 1.0 via the id parameter in planapplication...

6.1CVSS6.4AI score0.01442EPSS
SaveIn wildExploits1References5
Rows per page
Query Builder