Lucene search
+L

2416 matches found

CNNVD
CNNVD
added 2022/01/24 12:0 a.m.9 views

Student Quarterly Grading System 跨站脚本漏洞

Student Quarterly Grading System is a quarterly grading system for students by Carlo Montero, a personal developer. version 1.0 of Student Quarterly Grading System is vulnerable to a cross-site scripting vulnerability, which stems from allowing the fullname and username parameters to to execute...

5.4CVSS5.8AI score0.00728EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/24 12:0 a.m.6 views

Simple Membership System SQL注入漏洞

Simple Membership System is a simple membership system for Razormist individual developers. A security vulnerability exists in Simple Membership System that originates from allowing arbitrary SQL commands to be executed via the username and password parameters...

9.8CVSS8.6AI score0.01254EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/21 8:15 p.m.10 views

CVE-2021-40595

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

9.8CVSS7.6AI score0.01356EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/21 8:15 p.m.8 views

CVE-2021-40595

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

9.8CVSS7.6AI score0.01356EPSS
SaveExploits1References3
Prion
Prion
added 2022/01/21 8:15 p.m.17 views

Sql injection

SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leavesystem/classes/Login.php...

7.5CVSS9.8AI score0.01356EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/21 7:15 p.m.6 views

CVE-2021-44593

Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php...

8.1CVSS7.9AI score0.0424EPSS
SaveExploits2References5
OSV
OSV
added 2022/01/21 5:15 p.m.12 views

CVE-2021-46309

An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...

9.8CVSS5.8AI score0.01556EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/21 5:15 p.m.10 views

CVE-2021-46309

An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...

10CVSS8.1AI score0.01556EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/21 5:15 p.m.21 views

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Employee and Visitor Gate Pass Logging System 1.0 via the username parameter...

10CVSS9.8AI score0.01556EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/01/21 12:0 a.m.59 views

PT-2022-12632 · Sourcecodester · Employee/Visitor Gate Pass Logging System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Employee and Visitor Gate Pass Logging System version 1.0 Description: An SQL Injection issue exists via the username parameter. Recommendations: For version 1.0, avoid using the username parameter in the affected API endpoint...

10CVSS9.9AI score0.01556EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2022/01/21 12:0 a.m.10 views

Sourcecodester Online Leave Management System SQL注入漏洞

SourceCodester Online Leave Management System is an online leave management system. v1 of SourceCodester Online Leave Management System is vulnerable to SQL injection. system/classes/Login.php parameter lacks effective filtering and escaping, which can be exploited to execute arbitrary SQL comman...

9.8CVSS6.2AI score0.01356EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/01/21 12:0 a.m.11 views

Sourcecodester Employee and Visitor Gate Pass Logging System SQL注入漏洞

SourceCodester Employee and Visitor Gate Pass Logging System is a simple web-based employee and visitor pass logging system that provides companies with an automated platform to track or log the daily records of employees and visitors entering a company building or premises. A SQL injection...

10CVSS6AI score0.01556EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/20 7:15 p.m.4 views

CVE-2021-44092

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

9.8CVSS7.4AI score0.01254EPSS
SaveExploits1References2
OSV
OSV
added 2022/01/20 7:15 p.m.7 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
OSV
OSV
added 2022/01/20 7:15 p.m.9 views

CVE-2021-44092

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

9.8CVSS5.8AI score0.01254EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/01/20 7:15 p.m.5 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS7.4AI score0.01444EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/20 7:15 p.m.6 views

CVE-2021-44245

An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System CTMS 1.0 via the 1 username and 2 contactno parameters...

9.8CVSS5.8AI score0.01444EPSS
SaveExploits1References2
Prion
Prion
added 2022/01/20 7:15 p.m.13 views

Sql injection

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2022/01/20 7:15 p.m.21 views

Sql injection

An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form...

7.5CVSS9.8AI score0.01254EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2022/01/20 6:12 p.m.31 views

CVE-2021-44244

An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php...

10AI score0.01254EPSS
SaveExploits1References1
Rows per page
Query Builder