Lucene search
K

778 matches found

Cvelist
Cvelist
added 2023/01/19 9:22 a.m.15 views

CVE-2013-10014 oktora24 2moons sql injection

A vulnerability classified as critical has been found in oktora24 2moons. Affected is an unknown function. The manipulation leads to sql injection. The patch is identified as 1b09cf7672eb85b5b0c8a4de321f7a4ad87b09a7. It is recommended to apply a patch to fix this issue. VDB-218898 is the identifi...

5.5CVSS10AI score0.00297EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/01/19 12:0 a.m.3 views

PT-2023-10003 · Unknown · Oktora24 2Moons

Name of the Vulnerable Software and Affected Versions: oktora24 2moons affected versions not specified Description: A critical vulnerability has been found in oktora24 2moons, affecting an unknown function. The manipulation leads to sql injection. Recommendations: At the moment, there is no...

9.8CVSS7.4AI score0.00297EPSS
Exploits0References7
CNNVD
CNNVD
added 2023/01/19 12:0 a.m.3 views

2moons SQL注入漏洞

2moons is an application by oktora24 Individual Developer. 2moons has a SQL injection vulnerability that stems from a vulnerability found in oktora24 2moons that is categorized as critical. An unknown function is affected. The operation results in sql injection...

9.8CVSS6.6AI score0.00297EPSS
Exploits0References4
Prion
Prion
added 2023/01/17 2:15 p.m.11 views

Sql injection

A vulnerability was found in ollpu parontalli. It has been classified as critical. Affected is an unknown function of the file httpdocs/index.php. The manipulation of the argument s leads to sql injection. The patch is identified as 6891bb2dec57dca6daabc15a6d2808c8896620e5. It is recommended to...

7.5CVSS9.8AI score0.00364EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/01/16 12:0 a.m.1 views

saemorris TheRadSystem 跨站脚本漏洞

TheRadSystem is a Cmput 391 project by saemorris Individual Developer. A cross-site scripting vulnerability exists in saemorris TheRadSystem, which stems from a problem with an unknown function in the file users.php, which can be exploited by an attacker to manipulate the parameter q to cause...

6.1CVSS4.2AI score0.0025EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/16 12:0 a.m.2 views

PT-2023-16181 · Unknown · Theradsystem

Name of the Vulnerable Software and Affected Versions: saemorris TheRadSystem affected versions not specified Description: A problematic issue has been identified, affecting an unknown function of the file users.php. The manipulation of the q argument leads to cross-site scripting. This issue can...

6.1CVSS6.6AI score0.0025EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2023/01/07 12:0 a.m.2 views

PT-2023-10135 · Unknown · Bottle-Auth

Name of the Vulnerable Software and Affected Versions: john5223 bottle-auth affected versions not specified Description: A critical issue was found in john5223 bottle-auth, affecting an unknown function, which leads to sql injection. Recommendations: To fix this issue, it is recommended to apply ...

9.8CVSS7.6AI score0.00297EPSS
Exploits0References6
OSV
OSV
added 2023/01/06 12:31 p.m.11 views

GHSA-8PH8-9Q2J-C3RQ nodebatis SQL Injection vulnerability

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 can address this issue. The name of the patch is 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. It is...

9.8CVSS9.9AI score0.00347EPSS
Exploits0References6
OSV
OSV
added 2023/01/06 11:15 a.m.8 views

CVE-2018-25066

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

9.8CVSS10AI score
Exploits0References4
Cvelist
Cvelist
added 2023/01/06 10:33 a.m.12 views

CVE-2018-25066 PeterMu nodebatis sql injection

A vulnerability was found in PeterMu nodebatis up to 2.1.x. It has been classified as critical. Affected is an unknown function. The manipulation leads to sql injection. Upgrading to version 2.2.0 is able to address this issue. The patch is identified as 6629ff5b7e3d62ad8319007a54589ec1f62c7c35. ...

5.5CVSS9.9AI score0.00347EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/01/06 12:0 a.m.2 views

PT-2023-9997 · Unknown · Sheilazpy Eshop

Name of the Vulnerable Software and Affected Versions: sheilazpy eShop affected versions not specified Description: A critical issue has been found, leading to sql injection through the manipulation of an unknown function. The estimated number of potentially affected devices worldwide is not...

9.8CVSS7.4AI score0.00297EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/01/05 12:0 a.m.1 views

OpenACS bug-tracker 跨站请求伪造漏洞

bug-tracker is an OpenACS open source bug tracker. OpenACS bug-tracker suffers from a cross-site request forgery vulnerability that stems from a problem with an unknown function in the file lib/nav-bar.adp that can lead to cross-site request forgery...

8.8CVSS5.4AI score0.00152EPSS
Exploits0References5
Cvelist
Cvelist
added 2022/12/28 8:30 p.m.14 views

CVE-2018-25057 simple_php_link_shortener index.php sql injection

A vulnerability was found in simplephplinkshortener. It has been classified as critical. Affected is an unknown function of the file index.php. The manipulation of the argument $link"id" leads to sql injection. The name of the patch is b26ac6480761635ed94ccb0222ba6b732de6e53f. It is recommended t...

5.5CVSS10AI score0.00297EPSS
Exploits0References3
CNNVD
CNNVD
added 2022/12/25 12:0 a.m.0 views

Praat Script Collection 安全漏洞

Praat Script Collection is a collection of Praat scripts by Will Styler, an individual developer. A security vulnerability exists in Praat Script Collection that stems from an issue with an unknown function in the filesegmenter.praat file in the component Slash Handler, which can lead to a denial...

6.5CVSS5.3AI score0.00329EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/12/25 12:0 a.m.2 views

PT-2022-11694 · Unknown · Styler Praat Scripts

Name of the Vulnerable Software and Affected Versions: styler praat scripts affected versions not specified Description: A vulnerability was found in styler praat scripts, classified as problematic. It affects an unknown function of the file file segmenter.praat of the component Slash Handler,...

6.5CVSS6.9AI score0.00329EPSS
Exploits0References7
CNNVD
CNNVD
added 2022/12/21 12:0 a.m.1 views

pyambic-pentameter 跨站请求伪造漏洞

pyambic-pentameter is a web application for generating poetry from plain text by the individual developer Kathryn Lingel. A security vulnerability exists in pyambic-pentameter that stems from its unknown function that allows an attacker to implement cross-site request forgery...

8.8CVSS7.7AI score0.00118EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/12/19 3:30 p.m.20 views

FurqanSoftware/node-whois vulnerable to Prototype Pollution

A vulnerability classified as critical has been found in Furqan node-whois. Affected is an unknown function of the file index.coffee. The manipulation leads to improperly controlled modification of object prototype attributes 'prototype pollution'. It is possible to launch the attack remotely. Th...

9.8CVSS9.1AI score0.00541EPSS
Exploits1References6Affected Software1
CNNVD
CNNVD
added 2022/12/19 12:0 a.m.1 views

Node WHOIS 安全漏洞

Node WHOIS is an open source WHOIS client for Node.js by Furqan Software. Node WHOIS has a security vulnerability that stems from a problem with an unknown function in the file index.coffee, which can lead to improperly controlled modifications of object prototype properties, resulting in prototy...

9.8CVSS8.1AI score0.00541EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/12/11 8:15 a.m.2 views

CVE-2022-4401

A vulnerability was found in pallidlight online-course-selection-system. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-215268...

5.4CVSS3.6AI score0.00285EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/12/07 12:0 a.m.0 views

coder-chain_gdut 跨站脚本漏洞

coder-chaingdut is a binary image segmentation method based on lossless compression by the individual developer Wenyin Liu csliuwy. A security vulnerability exists in coder-chaingdut, which originates from an unknown function in file /back/index.php/user/User/?1, which is manipulated to cause...

6.1CVSS5.5AI score0.00224EPSS
Exploits1References3
Rows per page
Query Builder