Lucene search
+L

1981 matches found

CNNVD
CNNVD
added 2022/10/07 12:0 a.m.10 views

Wedding Planner 安全漏洞

Wedding Planner is a wedding planner project. Designed to provide users with an easy way to plan their wedding through a web application while using real data, Wedding Planner v1.0 has a security vulnerability that could be exploited by an attacker to execute arbitrary code...

9.8CVSS7.3AI score0.01152EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/06 6:18 p.m.2 views

CVE-2022-42243

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

7.2CVSS5.8AI score0.00863EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/10/06 6:18 p.m.3 views

CVE-2022-42243

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

7.2CVSS5.8AI score0.00863EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/10/06 12:0 a.m.7 views

PT-2022-26333 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the "/csms/admin/storages/view storage.php?id=" endpoint. This allows for potential exploitation. No information is provided about the...

7.2CVSS7.6AI score0.00863EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2022/10/06 12:0 a.m.6 views

PT-2022-26327 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the /csms/classes/Master.php?f=delete message endpoint. This allows for potential manipulation of database queries. Recommendations: For...

7.2CVSS7.1AI score0.00863EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/30 3:15 p.m.6 views

CVE-2022-41440

Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /phpinventory/editcategory.php...

7.2CVSS5.8AI score0.00734EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.8 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System v1.0 has a SQL injection vulnerability, which stems from an SQL injection vulnerability found to be contained in the searchdata parameter...

9.8CVSS8.4AI score0.01114EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2022/09/27 12:0 a.m.4 views

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system developed by Mayuri K. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which originates from /admin/update The booking.php id parameter lacks validation for external input SQL...

7.2CVSS8.3AI score0.0083EPSS
SaveExploits1References2
OSV
OSV
added 2022/09/26 1:15 p.m.8 views

CVE-2022-40925

Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "saveevent" file of the "Events" module in the background management system...

7.2CVSS5.9AI score0.00974EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/26 12:0 a.m.5 views

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System version v1.0 due to a lack of validation of the id parameter in its /admin/updateexpensecategory.php...

7.2CVSS7.3AI score0.00843EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/09/26 12:0 a.m.12 views

PT-2022-25366 · Unknown · Wedding Planner

Name of the Vulnerable Software and Affected Versions: Wedding Planner version 1.0 Description: The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the booking parameter at the "/admin/client assign.php" API endpoint. Recommendations: For Wedding Planner...

8.8CVSS8.7AI score0.00866EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/23 10:15 p.m.4 views

CVE-2022-40116

Online Banking System v1.0 was discovered to contain a SQL injection vulnerability via the search parameter at /net-banking/beneficiary.php...

9.8CVSS5.8AI score0.0085EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.7 views

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Personal developer. A SQL injection vulnerability exists in Online Tours & Travels Management System v1.0, which stems from a lack of validation of externally-entered SQL statements in the id parameter of...

7.2CVSS7.5AI score0.00896EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.6 views

Online Banking System SQL注入漏洞

Online Banking System is an online banking system developed using PHP and MySQL. v1.0 of Online Banking System has a security vulnerability that stems from a SQL injection issue in the custid parameter in the /net-banking/sendfunds.php location. No detailed vulnerability details are available at...

9.8CVSS8AI score0.0085EPSS
SaveExploits1References3
OSV
OSV
added 2022/09/22 10:15 p.m.6 views

CVE-2022-40087

Simple College Website v1.0 was discovered to contain an arbitrary file write vulnerability via the function fileputcontents. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

9.8CVSS6.1AI score0.01432EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/09/22 12:0 a.m.5 views

Online Pet Shop We App SQL注入漏洞

Online Pet Shop We App is an online pet store web application by Carlo Montero Personal Developer. A SQL injection vulnerability exists in Online Pet Shop We App v1.0, which originates from /petshop/classes/Master.php?f=deletecategory page id parameter is susceptible to SQL injection...

7.2CVSS7.3AI score0.00861EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/09/21 12:0 a.m.8 views

Simple Task Managing System 跨站脚本漏洞

Simple Task Managing System is a simple task management system. A security vulnerability exists in Simple Task Managing System v1.0, which is caused by a cross-site scripting vulnerability in the shortName parameter of the newTask.php component...

6.1CVSS5.9AI score0.00555EPSS
SaveExploits1References4
OSV
OSV
added 2022/09/16 3:15 p.m.5 views

CVE-2022-38832

School Activity Updates with SMS Notification v1.0 is vulnerable to SQL Injection via /activity/admin/modules/department/index.php?view=edit&id=...

7.2CVSS5.8AI score0.00896EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/09/16 12:0 a.m.6 views

School Activity Updates with SMS Notification SQL注入漏洞

School Activity Updates with SMS Notification is an online activity update with SMS notification from janobe Personal Developer. It is used to ensure that every student receives an SMS notification every time there is a school activity. A SQL injection vulnerability exists in School Activity...

7.2CVSS7.3AI score0.00896EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/09/14 11:15 a.m.3 views

CVE-2022-36669

Hospital Information System version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass...

9.8CVSS6.9AI score0.02159EPSS
SaveExploits2References5
Rows per page
Query Builder