Lucene search
+L

2416 matches found

OSV
OSV
added 2023/12/20 9:15 p.m.11 views

CVE-2023-48434

Online Voting System Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the regaction.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00666EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/20 12:00 a.m.8 views

PT-2023-30851 · Unknown · Projectworld Online Voting System

Name of the Vulnerable Software and Affected Versions: Online Voting System Project version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The username parameter of the "login action.php" resource does not validate the characters received and they are...

9.8CVSS9.9AI score0.00666EPSS
SaveExploits0References6
OSV
OSV
added 2023/12/13 8:15 p.m.11 views

CVE-2023-6774

A vulnerability was found in CodeAstro POS and Inventory Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /accountscon/registeraccount. The manipulation of the argument Username with the input alertdocument.cookie leads to cross...

5.4CVSS3.6AI score0.00679EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2023/12/13 12:00 a.m.8 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A cross-site scripting vulnerability exists in CodeAstro POS and Inventory Management System version 1.0, which stems from the presence of an unknown function in /accountscon/registeraccount that lead...

5.4CVSS6.1AI score0.00679EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2023/12/10 12:00 a.m.9 views

PT-2023-32727 · Unknown · Code-Projects Matrimonial Site

Name of the Vulnerable Software and Affected Versions: code-projects Matrimonial Site version 1.0 Description: A critical issue was found in the code-projects Matrimonial Site. The problem is related to an unknown function of the file /auth/auth.php?user=1. The manipulation of the username argume...

9.8CVSS7.9AI score0.00858EPSS
SaveExploits1References6
NVD
NVD
added 2023/12/01 3:15 a.m.24 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

7.5CVSS0.00664EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/12/01 12:00 a.m.9 views

Restaurant Table Booking System Security Vulnerability

PHPGurukul Restaurant Table Booking System is a restaurant table booking system. A security vulnerability exists in Restaurant Table Booking System due to cross-site scripting in the username parameter of rtbs/admin/index.php...

7.5CVSS6.1AI score0.00664EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/12/01 12:00 a.m.34 views

CVE-2023-48016

Restaurant Table Booking System V1.0 is vulnerable to SQL Injection in rtbs/admin/index.php via the username parameter...

8.1AI score0.00664EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/01 12:00 a.m.10 views

PT-2023-30665 · Unknown · Restaurant Table Booking System

Name of the Vulnerable Software and Affected Versions: Restaurant Table Booking System version 1.0 Description: The issue is related to SQL Injection in the rtbs/admin/index.php file via the username parameter. This allows for potential exploitation of the system. Recommendations: For Restaurant...

7.5CVSS7.8AI score0.00664EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2023/11/20 12:00 a.m.8 views

VulnCheck KEV: CVE-2020-28185

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php...

5.3CVSS6.1AI score0.18253EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/15 6:15 a.m.17 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS0.0077EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/15 6:15 a.m.6 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS7.4AI score0.0077EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/15 6:15 a.m.8 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

9.8CVSS5.8AI score0.0077EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/15 6:15 a.m.17 views

Sql injection

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

7.5CVSS8.4AI score0.0077EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/15 12:00 a.m.26 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

10AI score0.0077EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/11/15 12:00 a.m.15 views

CVE-2023-47445

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page...

8AI score0.0077EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/14 10:15 p.m.6 views

CVE-2023-46581

SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email parameters in the registration.php component...

5.5CVSS6.2AI score0.00309EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/07 9:15 p.m.9 views

CVE-2023-46787

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the auth/auth.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.9AI score0.00831EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/07 9:15 p.m.10 views

CVE-2023-46677

Online Job Portal v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'txtuname' parameter of the sign-up.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.00831EPSS
SaveExploits1References2
OSV
OSV
added 2023/11/02 3:15 a.m.11 views

CVE-2023-45018

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8CVSS5.8AI score0.007EPSS
SaveExploits1References2
Rows per page
Query Builder