Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2025/01/19 12:00 a.m.•22 views

PT-2025-3955 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...

9.8CVSS7.2AI score0.0068EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2025/01/19 12:00 a.m.•20 views

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...

9.8CVSS7.1AI score0.0068EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/19 12:00 a.m.•5 views

CVE-2025-0562: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

9.8CVSS5.5AI score0.0068EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/17 12:00 a.m.•3 views

CVE-2023-31702: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1...

7.2CVSS6.2AI score0.04312EPSS
SaveExploits5References3
attackerkb
attackerkb
•added 2021/10/11 1:15 p.m.•10 views

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

9.8CVSS7.3AI score0.01116EPSS
SaveExploits1References2
Mend
Mend
•added 2021/10/11 12:19 p.m.•2 views

CVE-2021-40543

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

9.8CVSS0.01116EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/10/11 12:00 a.m.•5 views

PT-2021-22931

Name of the Vulnerable Software and Affected Versions Opensis-Classic version 8.0 Description The issue is caused by a lack of sanitization of input data at two parameters usrid and prof id in the PasswordCheck.php file, leading to a SQL injection vulnerability. Recommendations For Opensis-Classi...

9.8CVSS0.01116EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/11 12:00 a.m.•6 views

CVE-2021-40543: Improper Neutralization of Special Elements used in an SQL Command

Opensis-Classic Version 8.0 is affected by a SQL injection vulnerability due to a lack of sanitization of input data at two parameters $GET'usrid' and $GET'profid' in the PasswordCheck.php file...

9.8CVSS5.9AI score0.01116EPSS
SaveExploits1References2
Rows per page
Query Builder