Lucene search
+L

719 matches found

CNNVD
CNNVD
•added 2022/08/11 12:00 a.m.•22 views

Gym Management System security vulnerabilities

Gym Management System is a gym management system. The system is developed in C and sql server and features customer and vendor management, product management, sales management, gym membership management, fitness assessment, system logging, database backup and restore. A security vulnerability...

5.4CVSS5.8AI score0.00668EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/07/29 12:00 a.m.•31 views

WordPress plugin Transposh WordPress Translation – Cross-site scripting vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin Transposh WordPress...

6.1CVSS7AI score0.01672EPSS
SaveExploits5References3
osv_cve
osv_cve
•added 2022/06/17 1:15 p.m.•25 views

CVE-2021-41408

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter...

9.8CVSS5.8AI score0.01146EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/06/17 1:15 p.m.•14 views

CVE-2021-41408

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter...

9.8CVSS7.3AI score0.01146EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/17 1:15 p.m.•31 views

Sql injection

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter...

7.5CVSS9.8AI score0.01146EPSS
SaveExploits1References2Affected Software1
CVE
CVE
•added 2022/06/17 10:09 a.m.•95 views

CVE-2021-41408

CVE-2021-41408 concerns VoIPmonitor WEB GUI (up to 24.61). The vulnerability is a SQL injection through the api.php endpoint via the user parameter, caused by missing input filtering/escaping. Exploitation could allow an attacker to execute arbitrary SQL commands and access stolen data, as indica...

9.8CVSS9.8AI score0.01146EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/06/17 12:00 a.m.•9 views

PT-2022-11389

Name of the Vulnerable Software and Affected Versions VoIPmonitor WEB GUI versions up to 24.61 Description The issue affects the VoIPmonitor WEB GUI, where SQL injection is possible through the "api.php" file and the user parameter. Recommendations For versions up to 24.61, update to a version th...

9.8CVSS0.01146EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/17 12:00 a.m.•13 views

CVE-2021-41408: Improper Neutralization of Special Elements used in an SQL Command

VoIPmonitor WEB GUI up to version 24.61 is affected by SQL injection through the "api.php" file and "user" parameter...

9.8CVSS8.1AI score0.01146EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/06/02 2:15 p.m.•27 views

CVE-2022-30352

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "authuser" parameter in index.php script...

9.8CVSS5.8AI score0.01889EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
•added 2022/05/31 12:00 a.m.•14 views

VulnCheck KEV: CVE-2021-41951

ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpresssso/pages/index.php via the wordpressuser parameter. If an attacker is able to persuade a victim to visit a crafted URL, malicious JavaScript content may be executed within the...

6.1CVSS6.3AI score0.77892EPSS
SaveIn wildExploits2References2
osv_ghsa
osv_ghsa
•added 2022/05/17 3:56 a.m.•18 views

GHSA-88F6-79X2-XQF3 Apache Jetspeed vulnerable to SQL Injection

Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitrary SQL commands via the 1 role or 2 user parameter to services/usermanager/users/...

8.8CVSS7.5AI score0.52351EPSS
SaveExploits5References8
osv_cve
osv_cve
•added 2022/04/05 8:15 p.m.•16 views

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

9.8CVSS7.3AI score0.01285EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/04/05 8:15 p.m.•12 views

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

9.8CVSS6AI score0.01285EPSS
SaveExploits1References2
NVD
NVD
•added 2022/04/05 8:15 p.m.•32 views

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

9.8CVSS0.01285EPSS
SaveExploits1References1
Prion
Prion
•added 2022/04/05 8:15 p.m.•23 views

Sql injection

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

7.5CVSS9.7AI score0.01285EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/04/05 7:03 p.m.•42 views

CVE-2022-27304

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

10AI score0.01285EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/04/05 12:00 a.m.•10 views

PT-2022-18368

Name of the Vulnerable Software and Affected Versions Student Grading System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the user parameter. Recommendations For version 1.0, consider restricting access to the vulnerable...

9.8CVSS5.9AI score0.01285EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/05 12:00 a.m.•10 views

CVE-2022-27304: Improper Neutralization of Special Elements used in an SQL Command

Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

9.8CVSS8.2AI score0.01285EPSS
SaveExploits1References2
zdt
zdt
•added 2022/03/14 12:00 a.m.•274 views

Student Grading System v1.0 SQL Injection Vulnerability

Title: Student Grading System v1.0 SQLi Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/14522/student-grading-system-using-phpmysql-source-code.html Reference:...

SaveExploits0
osv_cve
osv_cve
•added 2022/03/02 11:15 p.m.•21 views

CVE-2022-25398

Auto Spare Parts Management v1.0 was discovered to contain a SQL injection vulnerability via the user parameter...

9.8CVSS7.3AI score0.01249EPSS
SaveExploits1References1
Rows per page
Query Builder