Lucene search
+L

2459 matches found

CNNVD
CNNVD
added 2024/03/19 12:00 a.m.10 views

Netentsec NS-ASG Application Security Gateway Security Vulnerability

Netentsec NS-ASG Application Security Gateway is an application security gateway from China Netentsec. A security vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which stems from the parameter username in the file /nac/naccheck.php, which can lead to incorrect...

5.3CVSS6.8AI score0.00731EPSS
SaveExploits1References5
OSV
OSV
added 2024/03/18 2:15 p.m.10 views

CVE-2024-2586

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB...

7.5CVSS5.9AI score0.00586EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/18 12:00 a.m.13 views

AMSS++ SQL Injection Vulnerability

AMSS++ is a tool for the office administration support system of Amssplus. An SQL injection vulnerability exists in AMSS++ version 4.31, which originates from an SQL injection vulnerability in the username parameter of the /amssplus/index.php page...

8.2CVSS8AI score0.00586EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/15 12:00 a.m.13 views

BradWenqiang HR SQL Injection Vulnerability

HR is a human resources management system by Brad Wenqiang Personal Developer. A SQL injection vulnerability exists in BradWenqiang HR version 2.0, which stems from the fact that incorrect manipulation of the parameter userName can lead to sql injection...

9.8CVSS8.3AI score0.00593EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.11 views

PT-2024-17869 · Badger Meter · Badger Meter Monitool

Name of the Vulnerable Software and Affected Versions: Badger Meter Monitool versions 4.6.3 and earlier Description: A remote attacker could send a specially crafted SQL query to the server via the j username parameter and retrieve the information stored in the database. This issue allows an...

9.8CVSS7.7AI score0.02165EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2024/03/11 12:00 a.m.295 views

RUPPEINVOICE 1.0 SQL Injection

Title: RUPPEINVOICE-1.0 Multiple-SQLi Author: nu11secur1ty Date: 03/09/2024 Vendor: https://www.mayurik.com/ Software: https://www.sourcecodester.com/php/14831/billing-system-project-php-source-code-free-download.html Reference: https://portswigger.net/web-security/sql-injection Description: The...

7.4AI score
SaveExploits0
CNVD
CNVD
added 2024/03/08 12:00 a.m.30 views

Customer Support System SQL Injection Vulnerability

Customer Support System is a customer support system by oretnom23 Personal Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. Customer Support System suffers from a SQL injection vulnerability that originates from...

9.8CVSS7.9AI score0.0114EPSS
SaveExploits1References1
OSV
OSV
added 2024/03/07 1:15 p.m.9 views

CVE-2024-2245

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

6.1CVSS5.8AI score0.00308EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/07 1:15 p.m.20 views

Cross site scripting

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

5.8CVSS6.7AI score0.00308EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/07 1:10 p.m.30 views

CVE-2024-2245 Cross-Site Scripting vulnerability in moziloCMS

Cross-Site Scripting vulnerability in moziloCMS version 2.0. By sending a POST request to the '/install.php' endpoint, a JavaScript payload could be executed in the 'username' parameter...

5.4CVSS5.6AI score0.00308EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/03/07 12:00 a.m.7 views

PT-2024-12914 · Unknown · Code-Projects.Org Online Job Portal

Name of the Vulnerable Software and Affected Versions: code-projects.org Online Job Portal version 1.0 Description: The issue concerns SQL Injection via the Username parameter for "Employer." This allows for potential exploitation. Recommendations: For code-projects.org Online Job Portal version...

9.8CVSS8.1AI score0.00569EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/03/07 12:00 a.m.18 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8.1AI score0.00569EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/07 12:00 a.m.41 views

CVE-2023-41014

code-projects.org Online Job Portal 1.0 is vulnerable to SQL Injection via the Username parameter for "Employer."...

8AI score0.00569EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/03/07 12:00 a.m.11 views

Online Job Portal Security Vulnerability

Online Job Portal is an online job portal for janobe individual developers. A security vulnerability exists in Online Job Portal, which is caused by an SQL injection attack via the Username parameter of "Employer"...

9.8CVSS7.9AI score0.00569EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:15 a.m.7 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.9AI score0.0114EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/05 12:15 a.m.11 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS5.8AI score0.0114EPSS
SaveExploits1References2
NVD
NVD
added 2024/03/05 12:15 a.m.18 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

9.8CVSS7.8AI score0.0114EPSS
SaveExploits1References2
Prion
Prion
added 2024/03/05 12:15 a.m.23 views

Sql injection

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.6AI score0.0114EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/03/04 12:00 a.m.14 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.2AI score0.0114EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/03/04 12:00 a.m.27 views

CVE-2023-49547

Customer Support System v1 was discovered to contain a SQL injection vulnerability via the username parameter at /customersupport/ajax.php?action=login...

8.1AI score0.0114EPSS
SaveExploits1References2
Rows per page
Query Builder