Lucene search
+L

2416 matches found

CNNVD
CNNVD
added 2024/09/20 12:00 a.m.11 views

Code-Projects Blood Bank Management System SQL注入漏洞

Code-Projects Blood Bank Management System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which originates from a SQL injection vulnerability in the username/password parameters in the...

7.5CVSS7.9AI score0.00654EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/09/20 12:00 a.m.9 views

Code-Projects Patient Record Management System SQL注入漏洞

Code-Projects Patient Record Management System is a Code-Projects open source patient record management system. A SQL injection vulnerability exists in Code-Projects Patient Record Management System version 1.0, which originates from the username parameter in the login.php file containing a SQL...

7.5CVSS7.9AI score0.00575EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/09/20 12:00 a.m.15 views

PT-2024-39378 · Code Projects · Patient Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Patient Record Management System version 1.0 Description: A critical issue was found in the Patient Record Management System, affecting some unknown functionality of the file login.php. The manipulation of the username argument...

7.5CVSS8AI score0.00575EPSS
SaveExploits1References13
OSV
OSV
added 2024/09/11 7:15 p.m.10 views

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

9.8CVSS5.8AI score0.02576EPSS
SaveExploits2References2
NVD
NVD
added 2024/09/11 7:15 p.m.13 views

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

9.8CVSS0.02576EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2024/09/11 12:00 a.m.7 views

Inventio Lite SQL注入漏洞

Inventio Lite is a general purpose inventory and sales system. A security vulnerability exists in Inventio Lite v4 and prior versions that stems from vulnerability to SQL injection attacks via the username parameter in /?action=processlogin...

9.8CVSS7.8AI score0.02576EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2024/09/11 12:00 a.m.11 views

CVE-2024-44541

evilnapsis Inventio Lite Versions v4 and before is vulnerable to SQL Injection via the "username" parameter in "/?action=processlogin."...

8AI score0.02576EPSS
SaveExploits2References2
CVE
CVE
added 2024/09/11 12:00 a.m.55 views

CVE-2024-44541

Inventio Lite v4 and earlier is vulnerable to SQL Injection via the username parameter in /?action=processlogin. The issue arises from building an SQL query with user-supplied input (email/username) and password without proper parameter binding, enabling bypass of authentication and potential dat...

9.8CVSS8.3AI score0.02576EPSS
SaveExploits2References2
CNVD
CNVD
added 2024/09/09 12:00 a.m.9 views

Hospital Management System user-login.php File SQL Injection Vulnerability

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...

9.8CVSS7.8AI score0.00809EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/08 5:15 a.m.10 views

CVE-2024-8569

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file user-login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely...

9.8CVSS5.8AI score0.00809EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/09/08 12:00 a.m.12 views

Hospital Management System SQL注入漏洞

Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from an unknown function in the file user-login.php, where manipulation of the parameter username can lead to SQL injection. An attacker can use this...

9.8CVSS7.7AI score0.00809EPSS
SaveExploits1References6
CVE
CVE
added 2024/09/06 12:00 a.m.62 views

CVE-2024-44838

RapidCMS v1.3.1 contains a SQL injection vulnerability in the login path via the username parameter to /resource/runlogin.php. Impacted with high confidentiality, integrity, and availability (per CVSS 3.1: 9.8). No remediation or exploit details are provided in the supplied documents.

9.8CVSS7.9AI score0.00503EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/09/06 12:00 a.m.16 views

CVE-2024-44838

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...

8.3AI score0.00503EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/09/06 12:00 a.m.10 views

OpenRapid RapidCMS 安全漏洞

OpenRapid RapidCMS is OpenRapid open source a fast and easy to use CMS system. A security vulnerability exists in OpenRapid RapidCMS v1.3.1, which originates from a SQL injection vulnerability via the username parameter on /resource/runlogin.php...

9.8CVSS8AI score0.00503EPSS
SaveExploits1References2
OSV
OSV
added 2024/09/06 12:00 a.m.13 views

CVE-2024-44838

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...

9.8CVSS8.2AI score
SaveExploits0References3
Cvelist
Cvelist
added 2024/09/06 12:00 a.m.29 views

CVE-2024-44838

RapidCMS v1.3.1 was discovered to contain a SQL injection vulnerability via the username parameter at /resource/runlogin.php...

0.00503EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/05 5:15 p.m.22 views

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

9.8CVSS0.00532EPSS
SaveExploits1References1
OSV
OSV
added 2024/09/05 5:15 p.m.11 views

CVE-2024-44727

Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php...

9.8CVSS5.8AI score0.00532EPSS
SaveExploits1References1
NVD
NVD
added 2024/09/05 1:15 p.m.34 views

CVE-2024-8471

Cross-Site Scripting XSS vulnerability, whereby user-controlled input is not sufficiently encrypted. Exploitation of this vulnerability could allow an attacker to retrieve the session details of an authenticated user through JOBID and USERNAME parameters in /jobportal/process.php...

6.3CVSS0.00254EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/09/05 12:00 a.m.10 views

PT-2024-31224 · Unknown · Sourcecodehero Event Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodehero Event Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability via the parameter username in the "/event/admin/login.php" endpoint. This allows attackers to remotely compromise databases...

9.8CVSS8.1AI score0.00532EPSS
SaveExploits1References9
Rows per page
Query Builder