Lucene search
+L

253 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/26 12:00 a.m.•3 views

CVE-2023-5804: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username leads to sql injection. The attack may be initiated remotely. The identifier...

9.8CVSS7.2AI score0.00711EPSS
SaveExploits1References3
OSV
OSV
•added 2023/10/25 10:15 p.m.•16 views

CVE-2023-46584

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

9.8CVSS5.9AI score0.00738EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/25 10:15 p.m.•9 views

CVE-2023-46584

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

9.8CVSS6AI score0.00738EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/25 10:15 p.m.•42 views

CVE-2023-46584

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

9.8CVSS9.8AI score0.00738EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/25 10:15 p.m.•12 views

CVE-2023-46583

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

6.1CVSS6.2AI score0.00454EPSS
SaveExploits1References2
NVD
NVD
•added 2023/10/25 10:15 p.m.•39 views

CVE-2023-46583

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

6.1CVSS5.9AI score0.00454EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/25 10:15 p.m.•30 views

Cross site scripting

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

5.8CVSS5.9AI score0.00454EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/10/25 10:15 p.m.•29 views

Sql injection

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

7.5CVSS9.7AI score0.00738EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/10/25 12:00 a.m.•97 views

CVE-2023-46583

CVE-2023-46583 affects PHPGurukul Nipah virus (NiV) Testing Management System v1.0. The issue is a Cross-Site Scripting (XSS) vulnerability in the vulnerable State field, allowing an attacker to inject a crafted payload that can execute arbitrary code. Several sources corroborate the XSS descript...

6.1CVSS5.8AI score0.00454EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/10/25 12:00 a.m.•21 views

Nipah virus Testing Management System SQL Injection Vulnerability

Nipah virus Testing Management System is an online virus diagnostic platform. A security vulnerability exists in version v.1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from the presence of a SQL injection vulnerability that allows remote attackers to escalate privilege...

9.8CVSS8.1AI score0.00738EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/10/25 12:00 a.m.•15 views

CVE-2023-46583

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

6.2AI score0.00454EPSS
SaveExploits1References1
CVE
CVE
•added 2023/10/25 12:00 a.m.•77 views

CVE-2023-46584

CVE-2023-46584 affects PHPGurukul Nipah virus (NiV) Testing Management System v1.0. The vulnerability is a SQL Injection in the new-user-testing.php endpoint that allows a remote attacker to escalate privileges, as described across multiple sources. The NVD entry documents an attacker could explo...

9.8CVSS9.7AI score0.00738EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/10/25 12:00 a.m.•17 views

PT-2023-30101 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah virus NiV Testing Management System version 1.0 Description: A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via a crafted payload injected into the State field. This enables the execution of...

6.1CVSS6.4AI score0.00454EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•5 views

CVE-2023-46583: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

6.1CVSS6.9AI score0.00454EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/25 12:00 a.m.•4 views

CVE-2023-46584: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows a remote attacker to escalate privileges via a crafted request to the new-user-testing.php endpoint...

9.8CVSS8.2AI score0.00738EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/10/25 12:00 a.m.•42 views

CVE-2023-46583

Cross-Site Scripting XSS vulnerability in PHPGurukul Nipah virus NiV " Testing Management System v.1.0 allows attackers to execute arbitrary code via a crafted payload injected into the State field...

6AI score0.00454EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/03/09 9:30 p.m.•14 views

CVE-2023-1300 SourceCodester COVID 19 Testing Management System POST Parameter patient-report.php sql injection

A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file patient-report.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql...

6.5CVSS7.7AI score0.00791EPSS
SaveExploits1References3
CVE
CVE
•added 2023/03/09 9:30 p.m.•99 views

CVE-2023-1300

CVE-2023-1300 affects SourceCodester COVID 19 Testing Management System 1.0 in the file patient-report.php (POST Parameter Handler). The vulnerability is an SQL injection triggered by manipulating the searchdata parameter, exploitable remotely and publicly disclosed. Evidence from multiple source...

9.8CVSS8.3AI score0.00791EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/09 12:00 a.m.•4 views

CVE-2023-1300: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file patient-report.php of the component POST Parameter Handler. The manipulation of the argument searchdata leads to sql...

9.8CVSS5.5AI score0.00791EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/01/20 7:15 p.m.•9 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS7.4AI score0.01444EPSS
SaveExploits1References3
Rows per page
Query Builder