Lucene search
K

27 matches found

CNNVD
CNNVD
added 2026/01/12 12:0 a.m.1 views

Code-Projects Online Music Site SQL注入漏洞

Code-Projects Online Music Site is a Code-Projects open source online music site. Code-Projects Online Music Site version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameter txtusername in the file /Administrator/PHP/AdminAddUser.php, which could...

9.8CVSS7.6AI score0.00048EPSS
Exploits1References5
OSV
OSV
added 2025/11/23 3:15 p.m.1 views

CVE-2025-13554

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS5.7AI score
Exploits0References5
NVD
NVD
added 2025/11/23 3:15 p.m.3 views

CVE-2025-13554

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of the argument txtUsername leads to sql injection. It is possible to launch the attack remotely. The exploit h...

9.8CVSS0.00028EPSS
Exploits1References5
CNVD
CNVD
added 2025/10/15 12:0 a.m.2 views

Online Job Search Engine registration.php File SQL Injection Vulnerability

Online Job Search Engine is an online job search engine. Online Job Search Engine suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter txtusername in the file /registration.php. An attacker can exploit this...

9.8CVSS8.3AI score0.00042EPSS
Exploits1References1
OSV
OSV
added 2025/10/10 8:15 p.m.2 views

CVE-2025-11582

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

9.8CVSS5.8AI score0.00042EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/10/10 8:2 p.m.7 views

CVE-2025-11582 code-projects Online Job Search Engine registration.php sql injection

A vulnerability was detected in code-projects Online Job Search Engine 1.0. This issue affects some unknown processing of the file /registration.php. Performing manipulation of the argument txtusername results in sql injection. The attack may be initiated remotely. The exploit is now public and m...

7.5CVSS0.00042EPSS
Exploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2007-0581

Malware in sbrugna...

4.3CVSS6.4AI score0.0052EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-2721

Malware in sbrugna...

4.3CVSS6.4AI score0.00296EPSS
Exploits1References4
CNNVD
CNNVD
added 2024/11/01 12:0 a.m.1 views

Code-Projects Courier Management System SQL注入漏洞

Courier Management System is a courier management system. Courier Management System suffers from a SQL injection vulnerability that originates from improper handling of the txtusername parameter in the /login.php file. An attacker could exploit this vulnerability to disclose sensitive information...

9.8CVSS7.4AI score0.00097EPSS
Exploits1References5
CNNVD
CNNVD
added 2024/02/23 12:0 a.m.2 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is SourceCodester open source php-based system for employee performance management . SourceCodester Employee Management System version 1.0 there is an injection vulnerability , the vulnerability stems from /Account/login.php in the existence of some unkno...

9.8CVSS7.9AI score0.00171EPSS
Exploits1References7
CNNVD
CNNVD
added 2024/01/29 12:0 a.m.1 views

SourceCodester Employee Management System SQL Injection Vulnerability

SourceCodester Employee Management System is a php-based website builder for employee performance management from SourceCodester. A SQL injection vulnerability exists in SourceCodester Employee Management System version 1.0, which is caused by a sql injection in the txtusername parameter of...

9.8CVSS8.1AI score0.00134EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/03/11 12:0 a.m.1 views

Covid-19 Directory On Vaccination System SQL注入漏洞

The Covid-19 Directory On Vaccination System is a COVID-19 information management system by an individual developer in Ndueso Okorie, Nigeria. The system will accurately store and retrieve information about COVID-19 vaccinations to control the spread of a pandemic. A SQL injection vulnerability...

8.1CVSS6.7AI score0.00355EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.2 views

Web-Based Student Clearance System SQL注入漏洞

Web-Based Student Clearance System is a web-based student clearance system from the personal developer Ndueso Okorie.A SQL injection vulnerability exists in Web-Based Student Clearance System, which stems from the lack of validation of external input SQL statements in the parameter txtusername in...

9.8CVSS8.2AI score0.00243EPSS
Exploits1References3
Prion
Prion
added 2020/11/17 7:15 p.m.8 views

Sql injection

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php...

7.5CVSS9.7AI score0.00419EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2020/11/17 6:56 p.m.48 views

CVE-2020-28138

SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection in login.php via the txtUserName parameter. Root cause: improper input validation allowing SQL injection. Impact: as per CVE metrics, potential execution of arbitrary SQL with high/critical severity; remote attacker could man...

9.8CVSS9.8AI score0.00419EPSS
Exploits1References2Affected Software1
CNNVD
CNNVD
added 2020/11/17 12:0 a.m.5 views

SourceCodester Online Clothing Store SQL注入漏洞

SourceCodester Online Clothing Store is a website builder system from SourceCodester, Inc. that provides online clothing store functionality. A SQL injection vulnerability exists in SourceCodester version 1.0. The vulnerability stems from the program failing to properly validate user input, which...

9.8CVSS7.4AI score0.00419EPSS
Exploits1References3
Prion
Prion
added 2018/06/19 7:29 p.m.11 views

Sql injection

SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands via the ctl00$cphMainContent$txtUserName parameter to frmLogin.aspx...

7.5CVSS9.1AI score0.00421EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/08/26 12:0 a.m.1 views

SQL Injection Vulnerability in City Lighting Wireless Control System of China Electronics Technology Group Corporation

China Electronics Technology Group Corporation CETC is a state-owned large-scale high-tech enterprise group established on the basis of electronic research institutes and high-tech enterprises directly under the former Ministry of Information Industry. A SQL injection vulnerability exists in the...

7.7AI score
Exploits0
Cvelist
Cvelist
added 2014/05/22 8:0 p.m.17 views

CVE-2014-2947

Cross-site scripting XSS vulnerability in Login.aspx in Bizagi BPM Suite before 10.3 allows remote attackers to inject arbitrary web script or HTML via the txtUsername parameter...

5.7AI score0.0123EPSS
Exploits0References2
CVE
CVE
added 2014/05/22 8:0 p.m.40 views

CVE-2014-2947

Bizagi BPM Suite (all versions) contains a reflected XSS in Login.aspx exposed via the txtUsername parameter. CVE-2014-2947 affects Bizagi BPM Suite before 10.3, enabling remote attackers to inject arbitrary JavaScript/HTML in the victim’s browser. CERT/ENISA notes the vulnerability as XSS with a...

4.3CVSS5.9AI score0.0123EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder