Lucene search
+L

2416 matches found

Positive Technologies
Positive Technologies
added 2024/07/30 12:00 a.m.8 views

PT-2024-38179

Name of the Vulnerable Software and Affected Versions: SourceCodester School Log Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown function of the file /admin/ajax.php?action=login. The manipulation of the username argument leads to SQL...

9.8CVSS7.2AI score0.00788EPSS
SaveExploits1References9
OSV
OSV
added 2024/07/29 11:15 a.m.9 views

CVE-2024-7195

A vulnerability was found in itsourcecode Society Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/checkadmin.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The explo...

9.8CVSS6.4AI score0.00544EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/07/29 12:00 a.m.9 views

Society Management System SQL注入漏洞

Society Management System is itsourcecode open source a social management system. Society Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from the parameter username in the file /admin/checkadmin.php can lead to SQL injection...

9.8CVSS7AI score0.00544EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/07/28 12:00 a.m.7 views

SourceCodester School Fees Payment System 安全漏洞

SourceCodester School Fees Payment System is a school fees payment system. A security vulnerability exists in version 1.0 of the SourceCodester School Fees Payment System due to an SQL injection vulnerability in the username parameter of the /ajax.php?action=login file...

9.8CVSS7.8AI score0.00646EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/19 4:15 a.m.5 views

CVE-2024-6898

A vulnerability was found in SourceCodester Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument UserName leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS6.8AI score0.00604EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/07/19 12:00 a.m.8 views

PT-2024-37939 · Unknown · Sourcecodester Record Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Record Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file index.php. The manipulation of the UserName argument leads to sql injection. It is possible to initiate th...

9.8CVSS7.5AI score0.00604EPSS
SaveExploits1References8
OSV
OSV
added 2024/07/17 8:15 p.m.8 views

CVE-2024-40402

A SQL injection vulnerability was found in 'ajax.php' of Sourcecodester Simple Library Management System 1.0. This vulnerability stems from insufficient user input validation of the 'username' parameter, allowing attackers to inject malicious SQL queries...

6.3CVSS5.8AI score0.00367EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/07/10 12:00 a.m.8 views

Code-Projects Simple Task List SQL Injection Vulnerability

Code-Projects Simple Task List is a simple task list system from Code-Projects open source. A SQL injection vulnerability exists in Code-Projects Simple Task List version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to sql injection...

9.8CVSS8.3AI score0.00797EPSS
SaveExploits1References2
OSV
OSV
added 2024/07/09 8:15 p.m.8 views

CVE-2024-37872

SQL injection vulnerability in process.php in Itsourcecode Billing System in PHP 1.0 allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS6.1AI score0.00543EPSS
SaveExploits1References1
OSV
OSV
added 2024/07/09 5:15 a.m.12 views

CVE-2024-6169

The Unlimited Elements For Elementor Free Widgets, Addons, Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘username’ parameter in all versions up to, and including, 1.5.112 due to insufficient input sanitization and output escaping. This makes it possible for...

5.4CVSS5.9AI score0.0051EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/07/09 12:00 a.m.10 views

Billing System security breach

Billing System is a billing system by angel jude suarez personal developer. A security vulnerability exists in Billing System version 1.0, which stems from an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the username parameter...

8.1CVSS8.6AI score0.00543EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/07/08 12:00 a.m.15 views

PT-2024-37429 · WordPress · Unlimited Elements For Elementor

Name of the Vulnerable Software and Affected Versions: The Unlimited Elements For Elementor plugin versions up to, and including, 1.5.112 Description: The issue is related to Stored Cross-Site Scripting via the username parameter due to insufficient input sanitization and output escaping. This...

6.4CVSS5.9AI score0.0051EPSS
SaveExploits1References11
Positive Technologies
Positive Technologies
added 2024/07/03 12:00 a.m.9 views

PT-2024-37652 · Sourcecodester · Online Tours & Travels Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management version 1.0 Description: A critical vulnerability has been found in the software, affecting an unknown part of the file sms setting.php. The manipulation of the argument uname leads to sql...

8.8CVSS7.6AI score0.00599EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/07/03 12:00 a.m.5 views

Online Tours & Travels Management System SQL Injection Vulnerability

Online Tours & Travels Management System is an online tours management system developed by Mayuri K. Individual developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version 1.0, which stems from an incorrect operation of the parameter uname that can lead to...

8.8CVSS8AI score0.00599EPSS
SaveExploits1References5
OSV
OSV
added 2024/07/01 1:15 p.m.8 views

CVE-2024-6425

Incorrect Provision of Specified Functionality vulnerability in MESbook 20221021.03 version. An unauthenticated remote attacker can register user accounts without being authenticated from the route "/account/Register/" and in the parameters "UserName=&Password=&ConfirmPassword="...

9.1CVSS5.8AI score0.00544EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/06/30 12:00 a.m.11 views

PT-2024-37611 · Sourcecodester · Sourcecodester Medicine Tracker System

Name of the Vulnerable Software and Affected Versions: SourceCodester Medicine Tracker System version 1.0 Description: A critical vulnerability has been found in the SourceCodester Medicine Tracker System. This issue affects an unknown part of the file /classes/Users.php?f=register user. The...

7.5CVSS7.9AI score0.00508EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/06/30 12:00 a.m.8 views

Medicine Tracker System Security Vulnerability

Medicine Tracker System is a drug tracking system by the individual developer Carlo Montero. A security vulnerability exists in Medicine Tracker System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to an SQL injection...

7.5CVSS7.4AI score0.00508EPSS
SaveExploits1References5
OSV
OSV
added 2024/06/25 5:15 p.m.8 views

CVE-2024-6308

A vulnerability was found in itsourcecode Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploi...

9.8CVSS6.8AI score0.00682EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/06/25 12:00 a.m.7 views

PT-2024-37529 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue has been identified, affecting the file index.php. The manipulation of the username argument leads to SQL injection. This issue can be exploited remotely...

9.8CVSS8AI score0.00682EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/06/25 12:00 a.m.8 views

Simple Online Hotel Reservation System Security Vulnerability

Simple Online Hotel Reservation System is an online hotel reservation system. A security vulnerability exists in Simple Online Hotel Reservation System version 1.0, which originates from a parameter username in the file index.php that can lead to SQL injection...

9.8CVSS7.4AI score0.00682EPSS
SaveExploits1References4
Rows per page
Query Builder