Lucene search
K

778 matches found

CNNVD
CNNVD
added 2023/04/15 12:0 a.m.1 views

Sourcecodester Vehicle Service Management System SQL注入漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. SourceCodester Vehicle Service Management System version 1.0 SQL injection vulnerability , the vulnerability stems from the path...

9.8CVSS7AI score0.00351EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/04/15 12:0 a.m.1 views

IBOS SQL注入漏洞

IBOS is a collaborative office management system. A SQL injection vulnerability exists in IBOS v4.5.5, which originates from the presence of an unknown function in the path file/personal/del&op=recycle, which leads to a sql injection via the parameter fids...

9.8CVSS7.1AI score0.00346EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/04/02 12:0 a.m.2 views

OTCMS 代码问题漏洞

OTCMS Nettie CMS is an article-based web content management system CMS. A security vulnerability exists in OTCMS version 6.0.1, which originates from an unknown function in the file sysCheckFile.php?mudi=sql, resulting in unrestricted uploads...

9.8CVSS6.9AI score0.00488EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/03/22 12:0 a.m.2 views

Simple and Beautiful Shopping Cart System 代码问题漏洞

Simple and Beautiful Shopping Cart System is an e-commerce platform. A code issue exists in version 1.0 of the Simple and Beautiful Shopping Cart System, which stems from a security issue with an unknown function in the file uploadera.php that results in unrestricted uploads...

9.8CVSS6.9AI score0.00488EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/03/17 12:0 a.m.1 views

Watchdog Antivirus 访问控制错误漏洞

Watchdog Antivirus is an anti-malware program from Watchdog. designed to neutralize viruses, Trojans, rootkits, worms, spyware and adware. Watchdog Anti-Virus version 1.4.214.0 suffers from an Access Control Error vulnerability that stems from the presence of an unknown function in the library...

7.1CVSS5.4AI score0.00112EPSS
Exploits1References5
CNNVD
CNNVD
added 2023/03/17 12:0 a.m.1 views

GPAC 资源管理错误漏洞

GPAC is an open source multimedia framework. A resource management error vulnerability exists in GPAC version 2.3-DEV-rev35-gbbca86917-master, which stems from the presence of an unknown function in the file filters/loadtext.c, resulting in a buffer overflow...

7.8CVSS7.2AI score0.00171EPSS
Exploits1References7
CNNVD
CNNVD
added 2023/03/16 12:0 a.m.2 views

Online Food Ordering System 访问控制错误漏洞

Online Food Ordering System is an online food ordering system by Carlo Montero, an individual developer. An access control error vulnerability exists in SourceCodester Online Food Ordering System version 2.0, which stems from the presence of an unknown function in the file...

9.8CVSS7.4AI score0.00246EPSS
Exploits0References3
NVD
NVD
added 2023/03/15 4:15 p.m.9 views

CVE-2023-1416

A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of the argument socialfacebook leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the...

9.8CVSS7.5AI score0.00885EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2023/03/11 5:41 p.m.7 views

CVE-2023-1353 SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System verification.php cross site scripting

A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Affected is an unknown function of the file verification.php. The manipulation of the argument txtvaccinationID leads to cross site scriptin...

4CVSS6.2AI score0.00245EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/03/11 12:0 a.m.2 views

PT-2023-16921 · Sourcecodester · Covid-19 Directory On Vaccination System

Name of the Vulnerable Software and Affected Versions: SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System version 1.0 Description: A problematic issue was found in the system, affecting an unknown function of the file verification.php. The manipulation of the...

6.1CVSS6.6AI score0.00245EPSS
Exploits1References7
Prion
Prion
added 2023/02/27 11:15 a.m.14 views

Sql injection

A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/?page=user/manage. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The identifier of...

5.8CVSS9.7AI score0.00218EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2023/02/27 12:0 a.m.1 views

SourceCodester Doctors Appointment System SQL注入漏洞

SourceCodester Doctor Appointment System is an application from SourceCodester USA. It provides an appointment scheduling feature. A SQL injection vulnerability exists in the SourceCodester Doctors Appointment System version 1.0, which originates from a security issue with an unknown function in...

8.8CVSS7AI score0.00291EPSS
Exploits1References4
Prion
Prion
added 2023/02/19 6:15 p.m.10 views

Information disclosure

A vulnerability was found in doomsider shadow. It has been classified as problematic. Affected is an unknown function. The manipulation leads to denial of service. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. Continiou...

1.7CVSS7AI score0.00062EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2023/02/19 12:0 a.m.2 views

PT-2023-10343 · Unknown · Doomsider Shadow

Name of the Vulnerable Software and Affected Versions: doomsider shadow affected versions not specified Description: A vulnerability was found in doomsider shadow, classified as problematic, affecting an unknown function. The manipulation leads to denial of service, requiring a local attack. The...

5.5CVSS6.9AI score0.00062EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/02/19 12:0 a.m.1 views

Auto Dealer Management System 安全漏洞

Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System version 1.0, which stems from a problem with an unknown function in the file /adms/classes/Users.php that could lead to...

8.8CVSS6.8AI score0.02244EPSS
Exploits4References5
NVD
NVD
added 2023/02/18 8:15 a.m.11 views

CVE-2023-0905

A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has...

7.5CVSS7.4AI score0.03619EPSS
Exploits5References3
Prion
Prion
added 2023/02/10 3:15 p.m.13 views

Information disclosure

A vulnerability was found in CodenameOne 7.0.70. It has been classified as problematic. Affected is an unknown function. The manipulation leads to use of implicit intent for sensitive communication. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

5.1CVSS9.5AI score0.00422EPSS
Exploits0References5Affected Software1
CNNVD
CNNVD
added 2023/02/04 12:0 a.m.3 views

Online Eyewear Shop SQL注入漏洞

Online Eyewear Shop is an online eyewear store by Carlo Montero, a personal developer. A SQL injection vulnerability exists in Online Eyewear Shop version 1.0 due to an unknown function in the file oews/products/viewproduct.php, which can be used for SQL injection via the parameters name/pwd...

8.1CVSS6.5AI score0.0028EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/02/02 12:0 a.m.3 views

Employee Leaves Management System 安全漏洞

Employee Leaves Management System ELMS is an internal employee management system for individual developers. A security vulnerability exists in PHPGurukul Employee Leaves Management System version 1.0, which is caused by an unknown function in the file changepassword.php, with a weak password in t...

9.1CVSS5.7AI score0.00251EPSS
Exploits1References4
CNNVD
CNNVD
added 2023/01/29 12:0 a.m.2 views

wordcraft 跨站脚本漏洞

wordcraft is an application by the individual developer of capnsquarepants. A cross-site scripting vulnerability exists in wordcraft, which stems from an unknown function in tag.php that could lead to cross-site scripting...

6.1CVSS4.2AI score0.00341EPSS
Exploits0References5
Rows per page
Query Builder