Lucene search
+L

1994 matches found

CNNVD
CNNVD
•added 2023/09/17 12:00 a.m.•22 views

AC Repair and Services System Cross-Site Scripting Vulnerability

AC Repair and Services System is an air conditioning repair and services system by the individual developer Carlo Montero. A cross-site scripting vulnerability exists in AC Repair and Services System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameters...

6.1CVSS5.8AI score0.00357EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/09/17 12:00 a.m.•17 views

PT-2023-31521 · Sourcecodester · Simple Membership System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Membership System version 1.0 Description: A critical issue was found in the Simple Membership System, affecting an unknown functionality of the file club validator.php. The manipulation of the club argument leads to SQL...

7.5CVSS8AI score0.00611EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/09/16 12:00 a.m.•15 views

Food Ordering website SQL Injection Vulnerability

Food Ordering website is a food ordering website. A SQL injection vulnerability exists in Food Ordering Website version 1.0, which stems from some unknown processing in categoryfood.php that causes sql injection via the parameter id...

9.8CVSS8.1AI score0.00737EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2023/09/11 12:00 a.m.•18 views

WordPress plugin Lock User Account Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

4.3CVSS6.7AI score0.00252EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2023/09/11 12:00 a.m.•26 views

Cleaning Business Software Security Vulnerability

Cleaning Business Software is an open source cleaning business software by PHPJabbers. PHPJabbers Cleaning Business Software version 1.0 has a security vulnerability , the vulnerability stems from the user password is not encrypted , an attacker can access all user accounts...

9.8CVSS7AI score0.0053EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/09/09 12:00 a.m.•14 views

Take-Note App Cross-Site Request Forgery Vulnerability

Take-Note App is a note-taking application by the individual developer Remy Andrade. A cross-site request forgery vulnerability exists in Take-Note App version 1.0. An attacker can exploit this vulnerability to perform cross-site request forgery attacks...

8.8CVSS6.8AI score0.00437EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/09/09 12:00 a.m.•18 views

PT-2023-30899 · Sourcecodester · Sourcecodester Contact Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester Contact Manager App version 1.0 Description: A problem was found in the SourceCodester Contact Manager App. It affects some unknown functionality of the file update.php. The issue leads to cross-site request forgery. The attack...

8.8CVSS7.1AI score0.00417EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/09/07 12:00 a.m.•19 views

Inventory Management System Cross-Site Scripting Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in SourceCodester Free and Open Source Inventory Management System v1.0, which stems from the presence of multiple cross-site scripting XSS vulnerabilities that could...

6.1CVSS5.9AI score0.0064EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/09/02 12:00 a.m.•21 views

MOXA MXsecurity SQL Injection Vulnerability

MOXA MXsecurity is a management platform from China-based MOXA. It provides centralized visibility and security management to easily monitor and identify network threats and prevent security misconfigurations to create a robust threat defense. A security vulnerability exists in MXsecurity v1.0.1...

8.1CVSS6.9AI score0.00691EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2023/08/28 2:15 p.m.•10 views

CVE-2023-39708

A stored cross-site scripting XSS vulnerability in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Add New parameter under the New Buy section...

6.1CVSS6.5AI score0.0064EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/08/28 12:00 a.m.•16 views

Inventory Management System 跨站脚本漏洞

Inventory Management System is an inventory management system from the individual developers of stemword. A security vulnerability exists in Free and Open Source Inventory Management System v1.0 that could allow an attacker to execute arbitrary web script or HTML by injecting a crafted payload in...

6.1CVSS6.6AI score0.0064EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/08/21 12:00 a.m.•17 views

Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system by stemword individual developers. A SQL injection vulnerability exists in Free and Open Source Inventory Management System version 1.0, which stems from an incorrect manipulation of the columns0data parameter that can lead to sql...

8.8CVSS7.1AI score0.00788EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/08/20 12:00 a.m.•21 views

Hospital Management System SQL注入漏洞

Hospital Management System HMS is a computerized system that helps manage healthcare-related information and helps healthcare providers do their jobs efficiently. An SQL injection vulnerability exists in Free Hospital Management System for Small Practices version 1.0, which stems from the paramet...

9.8CVSS7.1AI score0.00674EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2023/08/20 12:00 a.m.•19 views

PT-2023-4540 · Sourcecodester · Sourcecodester Free Hospital Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Free Hospital Management System for Small Practices version 1.0 Description: A critical issue has been identified, affecting the /patient/appointment.php file. The sheduledate argument is vulnerable to SQL injection, allowing...

10CVSS7AI score0.00541EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/08/20 12:00 a.m.•18 views

Card Holder Management System 安全漏洞

Card Holder Management System is a cardholder management system from the individual developer Arvin Arandilla. A security vulnerability exists in Card Holder Management System version 1.0, which stems from the component Minus Value Handler that can lead to improper input validation...

5.3CVSS5AI score0.00469EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2023/08/17 8:15 p.m.•11 views

CVE-2023-31939

SQL injection vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the costomerid parameter at customeredit.php...

7.2CVSS6.2AI score0.01297EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/15 12:00 a.m.•13 views

eVotingSystem-PHP SQL Injection Vulnerability

eVotingSystem-PHP is a PHP-based e-voting system by Mohammad Ajazuddin Individual Developer. A security vulnerability exists in eVotingSystem-PHP version v.1.0 that originates from obtaining sensitive information and executing arbitrary code via user input fields...

8.8CVSS7.1AI score0.01037EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/15 12:00 a.m.•17 views

EasyAdmin8 Code Issues Vulnerabilities

EasyAdmin8 is a server administration suite for Blumlaut Individual Developers. A security vulnerability exists in EasyAdmin8 version v.1.0, which stems from the upload type method allowing the upload of arbitrary file types...

9.8CVSS7.1AI score0.00953EPSS
SaveExploits1References2
OSV
OSV
•added 2023/08/14 1:15 p.m.•24 views

CVE-2023-37070

Code Projects Hospital Information System 1.0 is vulnerable to Cross Site Scripting XSS...

4.8CVSS5.8AI score0.00642EPSS
SaveExploits1References4
OSV
OSV
•added 2023/08/10 5:15 p.m.•24 views

CVE-2023-36315

There is a Cross Site Scripting XSS vulnerability in the "action" parameter of index.php in PHPJabbers Callback Widget v1.0...

6.1CVSS5.8AI score0.00444EPSS
SaveExploits0References2
Rows per page
Query Builder