Lucene search
+L

2416 matches found

Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.10 views

PT-2024-17869 · Badger Meter · Badger Meter Monitool

Name of the Vulnerable Software and Affected Versions: Badger Meter Monitool versions 4.6.3 and earlier Description: A remote attacker could send a specially crafted SQL query to the server via the j username parameter and retrieve the information stored in the database. This issue allows an...

9.8CVSS7.7AI score0.02165EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2024/03/11 12:00 a.m.293 views

RUPPEINVOICE 1.0 SQL Injection

Title: RUPPEINVOICE-1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/09/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2024/03/08 12:00 a.m.30 views

Customer Support System SQL Injection Vulnerability

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

9.8CVSS7.9AI score0.0115EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/07 1:15 p.m.9 views

CVE-2024-2245

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/07 1:15 p.m.20 views

Cross site scripting

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

5.8CVSS6.7AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/07 1:10 p.m.28 views

CVE-2024-2245 Cross-Site Scripting vulnerability in moziloCMS

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

5.4CVSS5.6AI score0.00308EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/03/07 12:00 a.m.16 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8.1AI score0.00569EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/07 12:00 a.m.7 views

PT-2024-12914 · Unknown · Code-Projects.Org Online Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects.org Online Job Portal version 1.0 Description: The issue concerns SQL Injection via the Username parameter for "Employer." This allows for potential exploitation. Recommendations: For code-projects.org Online Job Portal version...

9.8CVSS8.1AI score0.00569EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/03/07 12:00 a.m.39 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8AI score0.00569EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.10 views

Online Job Portal Security Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A security vulnerability exists in Online Job Portal, which is caused by an SQL injection attack via the Username parameter of "Employer"...

9.8CVSS7.9AI score0.00569EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.7 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.9AI score0.0115EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/05 12:15 a.m.10 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.8AI score0.0115EPSS
SaveExploits1References2
NVD
NVD
added 2024/03/05 12:15 a.m.16 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS7.8AI score0.0115EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/05 12:15 a.m.20 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.6AI score0.0115EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/04 12:00 a.m.13 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.2AI score0.0115EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/04 12:00 a.m.22 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.1AI score0.0115EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/01 1:15 p.m.8 views

CVE-2024-2063

A vulnerability, which was classified as problematic, was found in SourceCodester Petrol Pump Management Software 1.0. Affected is an unknown function of the file /admin/app/profilecrud.php. The manipulation of the argument username leads to cross site scripting. It is possible to launch the atta...

4.8CVSS3.8AI score0.00398EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/01 12:00 a.m.5 views

PT-2024-18688 · Sourcecodester · Sourcecodester Petrol Pump Management

Name of the Vulnerable Software and Affected Versions: SourceCodester Petrol Pump Management Software version 1.0 Description: A problematic issue was found in the software, affecting an unknown function of the file /admin/app/profile crud.php. The manipulation of the username argument leads to...

4.8CVSS4AI score0.00398EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.9 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username/password can lead to sql injection...

9.8CVSS8.4AI score0.00701EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/02/23 12:00 a.m.9 views

Library System SQL Injection Vulnerability

Library System is a library management system by the individual developer nurhodelta17. A SQL injection vulnerability exists in Library System version 1.0, which stems from the fact that incorrect manipulation of the parameters username and password can lead to SQL injection...

9.8CVSS8.1AI score0.00579EPSS
SaveExploits0References4
Rows per page
Query Builder