Lucene search
+L

2416 matches found

CNNVD
CNNVD
added 2025/06/29 12:00 a.m.8 views

SourceCodester Simple Company Website 注入漏洞

SourceCodester Simple Company Website is a simple company website from SourceCodester, Inc. An injection vulnerability exists in SourceCodester Simple Company Website version 1.0, which originates from a SQL injection due to the incorrect operation of the parameter Username in the file...

9.8CVSS7.8AI score0.00454EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/06/27 12:00 a.m.5 views

Simple Online Hotel Reservation System index.php File SQL Injection Vulnerability

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.9 views

bicycleSharingServer 注入漏洞

bicycleSharingServer is a bicycle sharing JavaWEB backend for individual developers in huija, China. There is an injection vulnerability in bicycleSharingServer, which originates from improper manipulation of the Username parameter in the userDao.selectUserByUserNameLike function in the...

6.5CVSS6.8AI score0.00237EPSS
SaveExploits0References4
CNVD
CNVD
added 2025/06/27 12:00 a.m.3 views

Simple Pizza Ordering System adduser-exec.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter Username in the file /adduser-exec.php. An attacker can exploit th...

9.8CVSS7.9AI score0.00415EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/06/27 12:00 a.m.9 views

openvpn-cms-flask 注入漏洞

openvpn-cms-flask is a web management system based on openvpn by xiaoyunjie individual developer in China. An injection vulnerability exists in openvpn-cms-flask 1.2.7 and earlier versions, which originates from a command injection due to the incorrect operation of the parameter Username in the...

9.8CVSS6.7AI score0.03199EPSS
SaveExploits1References8
CNVD
CNVD
added 2025/06/27 12:00 a.m.8 views

Client Details System index.php File SQL Injection Vulnerability

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /clientdetails/admin/index.php. An attacker can exploit this...

9.8CVSS8.1AI score0.0041EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.7 views

Online Shoe Store admin_index.php File SQL Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of the parameter Username in the file /admin/adminindex.php for externally entered SQL statements. An attacker can exploit this vulnerability ...

9.8CVSS7.9AI score0.0041EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/06/27 12:00 a.m.6 views

Pre-School Enrollment System check_availability.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...

9.8CVSS8.2AI score0.0041EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/24 10:15 p.m.8 views

CVE-2025-6580

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the component Login. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.7AI score0.00448EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/24 12:00 a.m.11 views

SourceCodester Best Salon Management System 注入漏洞

SourceCodester Best Salon Management System is an open source salon management system from SourceCodester. An injection vulnerability exists in SourceCodester Best Salon Management System version 1.0, which stems from mishandling of the parameter Username in the login component, which can lead to...

9.8CVSS7.9AI score0.00448EPSS
SaveExploits1References6
CNVD
CNVD
added 2025/06/23 12:00 a.m.9 views

Hostel Management System /login-hm.inc.php File SQL Injection Vulnerability

Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the Username parameter of the /includes/login-hm.inc.php file. An attacker can use this...

9.8CVSS8.3AI score0.00438EPSS
SaveExploits1References1
OSV
OSV
added 2025/06/22 12:15 a.m.9 views

CVE-2025-6447

A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. T...

9.8CVSS5.7AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/22 12:00 a.m.13 views

Code-Projects Simple Online Hotel Reservation System 注入漏洞

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file...

9.8CVSS7.8AI score0.0041EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/21 11:15 p.m.10 views

CVE-2025-6446

A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...

9.8CVSS5.8AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/21 12:00 a.m.9 views

Code-Projects Client Details System 注入漏洞

Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /clientdetails/admin/index.php. An attacker can exploit this...

9.8CVSS8AI score0.0041EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/06/21 12:00 a.m.9 views

CampCodes Online Hospital Management System 注入漏洞

CampCodes Online Hospital Management System is an online hospital management system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Hospital Management System, which originates from a SQL injection due to an incorrect operation of the parameter Userna...

9.8CVSS7.8AI score0.0041EPSS
SaveExploits1References6
OSV
OSV
added 2025/06/20 8:15 a.m.11 views

CVE-2025-6318

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/checkavailability.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit ha...

9.8CVSS5.8AI score0.0041EPSS
SaveExploits1References5
OSV
OSV
added 2025/06/20 4:15 a.m.7 views

CVE-2025-6306

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/adminindex.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has be...

9.8CVSS5.8AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.8 views

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...

9.8CVSS8.1AI score0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/06/20 12:00 a.m.8 views

Code-Projects Simple Pizza Ordering System 安全漏洞

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from the lack of validation of an externally entered SQL statement in the parameter Username in the file /adduser-exec.php. An attacker can exploit th...

9.8CVSS8.2AI score0.00415EPSS
SaveExploits1References1
Rows per page
Query Builder