Lucene search
+L

244 matches found

CNNVD
CNNVD
added 2022/08/16 12:0 a.m.7 views

WordPress plugin MotoPress Timetable and Event Schedule 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/08/16 12:0 a.m.9 views

WordPress plugin MotoPress Timetable and Event Schedule 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

6.1CVSS5.9AI score0.00458EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/16 12:0 a.m.16 views

PT-2022-19020 · Motopress · Motopress Timetable/Event Schedule

Name of the Vulnerable Software and Affected Versions: MotoPress Timetable and Event Schedule affected versions not specified Description: A problematic issue affects some unknown functionality of the file /wp-admin/admin-ajax.php of the component Quick Edit. The manipulation of the argument post...

6.1CVSS5.9AI score0.00497EPSS
SaveExploits0References3
OSV
OSV
added 2022/07/20 9:15 p.m.6 views

CVE-2022-34588

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...

8.8CVSS5.8AI score0.00757EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/07/20 9:15 p.m.3 views

CVE-2022-34588

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...

8.8CVSS6AI score0.00757EPSS
SaveExploits1References2
NVD
NVD
added 2022/07/20 9:15 p.m.27 views

CVE-2022-34588

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...

8.8CVSS0.00757EPSS
SaveExploits1References1
Prion
Prion
added 2022/07/20 9:15 p.m.22 views

Sql injection

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...

6.5CVSS9AI score0.00757EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/07/20 8:50 p.m.33 views

CVE-2022-34588

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetableinsertform.php...

9.3AI score0.00757EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/07/20 12:0 a.m.7 views

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in version 1.0 of Advanced School Management System, which originates from an SQL injection issue in the grade parameter of the...

8.8CVSS8.2AI score0.00757EPSS
SaveExploits1References2
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2022/07/07 12:0 a.m.25 views

JUX Timetable x

JUX TimetableVersion: Old 1.0.4 / New 1.0.5 Update URL: https://extensions.joomla.org/extension/jux-timetable/ Download URL: https://demo.joomlaux.com/download/pkgjuxtimetable.zip...

7.2AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
added 2022/06/17 12:0 a.m.57 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68965)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...

6.5CVSS2.5AI score0.00909EPSS
SaveExploits1Affected Software1
CNVD
CNVD
added 2022/06/17 12:0 a.m.55 views

Advanced School Management System SQL Injection Vulnerability (CNVD-2022-68959)

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...

6.5CVSS2.6AI score0.00909EPSS
SaveExploits1Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/06/15 7:15 p.m.2 views

CVE-2022-32377

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...

7.2CVSS5.9AI score0.00909EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/06/15 7:15 p.m.3 views

CVE-2022-32375

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/gettimetable.php?id=...

7.2CVSS5.9AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2022/06/15 7:15 p.m.6 views

CVE-2022-32377

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getexamtimetable.php?id=...

7.2CVSS7.1AI score0.00909EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.7 views

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /gettimetable.php?id=The page lacks validation for external SQL statements, which cou...

7.2CVSS5.9AI score0.00909EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/06/15 12:0 a.m.6 views

Advanced School Management System SQL注入漏洞

Advanced School Management System is a school management system developed by Angel Jude Reyes Suarez. v1.0 of Advanced School Management System is vulnerable to SQL injection, which originates from /school/model /getexamtimetable.php?id=The page lacks validation for external input SQL statements,...

7.2CVSS5.9AI score0.00909EPSS
SaveExploits1References2
OSV
OSV
added 2022/04/18 6:15 p.m.5 views

CVE-2022-0785

The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

9.8CVSS5.8AI score0.09103EPSS
SaveExploits2References1
ATTACKERKB
ATTACKERKB
added 2022/04/18 6:15 p.m.10 views

CVE-2022-0785

The Daily Prayer Time WordPress plugin before 2022.03.01 does not sanitise and escape the month parameter before using it in a SQL statement via the getmonthlytimetable AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection...

9.8CVSS5.6AI score0.09103EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/04/08 12:0 a.m.7 views

Kimai 安全漏洞

Kimai is an open source, web-based, multi-user time tracking application. A security vulnerability exists in Kimai 2 1.14, which is caused by the description in the new timetable...

7.8CVSS7.3AI score0.00999EPSS
SaveExploits0References2
Rows per page
Query Builder