Lucene search
K

17 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-5929

Malware in sbrugna...

7.5CVSS6.4AI score0.0101EPSS
Exploits0References5
CNNVD
CNNVD
added 2025/04/06 12:0 a.m.2 views

Code-Projects Blood Bank Management System 注入漏洞

Code-Projects Blood Bank Management System is an open source blood bank management system from Code-Projects. An injection vulnerability exists in Code-Projects Blood Bank Management System version 1.0, which stems from an incorrect manipulation of the parameter useremail that can lead to SQL...

9.8CVSS7.9AI score0.00495EPSS
Exploits1References6
OSV
OSV
added 2025/01/21 9:15 p.m.1 views

CVE-2024-57539

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail...

8.2CVSS5.8AI score0.01345EPSS
Exploits1References1
OSV
OSV
added 2024/10/12 1:15 p.m.3 views

CVE-2024-9894

A vulnerability, which was classified as critical, was found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file reset.php. The manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclos...

8.8CVSS5.7AI score0.00517EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2024/09/29 12:0 a.m.3 views

PT-2024-39576 · Unknown · Code-Projects Blood Bank System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank System version 1.0 Description: A critical issue has been found in the code-projects Blood Bank System, affecting the file /forgot.php. The manipulation of the useremail argument leads to SQL injection. This issue can...

9.8CVSS8.1AI score0.00529EPSS
Exploits1References10
CNNVD
CNNVD
added 2024/09/29 12:0 a.m.4 views

Code-Projects Blood Bank System SQL注入漏洞

Code-Projects Blood Bank System is a Code-Projects open source blood bank management system. A SQL injection vulnerability exists in Code-Projects Blood Bank System version 1.0, which originates from an SQL injection issue contained in the useremail parameter of the /forgot.php page...

9.8CVSS7AI score0.00529EPSS
Exploits1References6
OSV
OSV
added 2024/05/30 3:15 p.m.1 views

CVE-2024-5517

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file changepwd.php. The manipulation of the argument useremail leads to sql injection. The attack may be launched remotely...

9.8CVSS5.7AI score0.00851EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2024/05/30 12:0 a.m.2 views

PT-2024-36488 · Unknown · Itsourcecode Online Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: itsourcecode Online Blood Bank Management System version 1.0 Description: A critical issue affects some unknown functionality of the file changepwd.php. The manipulation of the useremail argument leads to sql injection. The attack may be...

9.8CVSS7.6AI score0.00851EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2024/03/07 12:0 a.m.3 views

PT-2024-19578 · Unknown · Boyiddha Automated-Mess-Management-System

Name of the Vulnerable Software and Affected Versions: boyiddha Automated-Mess-Management-System version 1.0 Description: A critical issue affects the processing of the file /index.php of the component Login Page. The manipulation of the useremail argument leads to sql injection. The attack may b...

9.8CVSS7.4AI score0.00675EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2023/08/08 12:0 a.m.2 views

PT-2023-28291 · Sourcecodester · Sourcecodester Doctors Appointment System

Name of the Vulnerable Software and Affected Versions: SourceCodester Doctors Appointment System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file login.php. The manipulation of the useremail argument leads to sql injection. Thi...

7.5CVSS7.6AI score0.00669EPSS
Exploits1References6
Exploit DB
Exploit DB
added 2023/07/19 12:0 a.m.259 views

Vaidya-Mitra 1.0 - Multiple SQLi

Title: Vaidya-Mitra 1.0 - Multiple SQLi Author: nu11secur1ty Date: 07.12.2023 Vendor: https://mayurik.com/ Software: free: https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html, https://mayurik.com/source-code/P5890/best-hospital-management-system-in-php...

7.4AI score
Exploits0
Packet Storm
Packet Storm
added 2023/07/13 12:0 a.m.317 views

Vaidya-Mitra 1.0 SQL Injection

Title: Vaidya-Mitra 1.0 Multiple - SQLi Author: nu11secur1ty Date: 07.12.2023 Vendor: https://mayurik.com/ Software: free: https://www.sourcecodester.com/php/16720/free-hospital-management-system-small-practices.html, https://mayurik.com/source-code/P5890/best-hospital-management-system-in-php...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2017/04/24 6:0 p.m.19 views

CVE-2015-7568

SQL injection vulnerability in the password recovery feature in Yeager CMS 1.2.1 allows remote attackers to change the account credentials of known users via the "userEmail" parameter...

9.9AI score0.04056EPSS
Exploits5References4
CVE
CVE
added 2017/04/24 6:0 p.m.47 views

CVE-2015-7568

CVE-2015-7568 corresponds to a SQL injection vulnerability in the password recovery feature of Yeager CMS 1.2.1. The flaw, exploitable via the userEmail parameter, can allow remote attackers to change the credentials of known accounts. The affected product is Yeager CMS (version 1.2.1); the under...

9.8CVSS9.8AI score0.04056EPSS
Exploits5References4Affected Software1
NVD
NVD
added 2009/01/23 7:0 p.m.11 views

CVE-2008-5959

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

7.5CVSS8.6AI score0.0101EPSS
Exploits0References4
Cvelist
Cvelist
added 2009/01/23 6:38 p.m.16 views

CVE-2008-5959

Multiple SQL injection vulnerabilities in start.asp in Active Test 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or 2 password parameter aka password field. NOTE: some of these details are obtained from third party information...

8.6AI score0.0101EPSS
Exploits0References4
Prion
Prion
added 2008/12/17 5:30 p.m.11 views

Sql injection

SQL injection vulnerability in start.asp in Active eWebquiz 8.0 allows remote attackers to execute arbitrary SQL commands via the 1 useremail parameter aka username field or the 2 password parameter. NOTE: some of these details are obtained from third party information...

7.5CVSS9.2AI score0.00999EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder