Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/12/13 6:54 p.m.6 views

CVE-2025-14570

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

9.8CVSS7.3AI score0.0001EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/12 9:31 p.m.3 views

EUVD-2025-203122

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

7.5CVSS6.4AI score0.0001EPSS
Exploits1References5
OSV
OSV
added 2025/12/12 7:16 p.m.3 views

CVE-2025-14570

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

9.8CVSS5.7AI score
Exploits0References4
NVD
NVD
added 2025/12/12 7:16 p.m.3 views

CVE-2025-14570

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

9.8CVSS0.0001EPSS
Exploits1References4
Cvelist
Cvelist
added 2025/12/12 6:32 p.m.30 views

CVE-2025-14570 projectworlds Advanced Library Management System view_admin.php sql injection

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

7.5CVSS0.0001EPSS
Exploits1References4
Vulnrichment
Vulnrichment
added 2025/12/12 6:32 p.m.4 views

CVE-2025-14570 projectworlds Advanced Library Management System view_admin.php sql injection

A flaw has been found in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /viewadmin.php. This manipulation of the argument adminid causes sql injection. The attack may be initiated remotely. The exploit has been publishe...

7.5CVSS7.2AI score0.0001EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

projectworlds Advanced Library Management System SQL注入漏洞

Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter adminid in the file...

9.8CVSS7.8AI score0.0001EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.4 views

PT-2025-50963

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0, specifically within the file /view admin.php. Manipulation of the admin id argument can lea...

9.8CVSS7.4AI score0.0001EPSS
Exploits1References7
RedhatCVE
RedhatCVE
added 2025/05/23 9:14 a.m.1 views

CVE-2024-37620

PHPVOD v4.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the id parameter at /view/admin/view.php...

6.1CVSS5.8AI score0.00193EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/21 12:0 a.m.1 views

opencms 安全漏洞

opencms is a CMS system of fumiao individual developer. A security vulnerability exists in opencms V2.3, which originates from the file src/main/webapp/view/admin/document/dataPage.jsp being read by an arbitrary file...

4.3CVSS6.7AI score0.00311EPSS
Exploits1References2
OSV
OSV
added 2024/07/16 5:15 p.m.1 views

CVE-2019-16639

An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker who only has web interface access to use TELNET commands and/or show admin passwords via the modeurl=exec&command= substring. This affects EG-2000SE...

9.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2024/06/17 12:0 a.m.1 views

StrongShop Cross-Site Scripting Vulnerability

StrongShop is a free and open source cross-border e-commerce mall website by StrongShop Open Source. A cross-site scripting vulnerability exists in StrongShop v1.0, which originates from a cross-site scripting vulnerability in the id parameter of /view/admin/view.php...

7.2CVSS6.2AI score0.00155EPSS
Exploits1References3
OSV
OSV
added 2023/05/17 7:15 p.m.2 views

CVE-2023-2773

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file viewadmin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

8.8CVSS5.7AI score
Exploits0References3
NVD
NVD
added 2023/05/17 7:15 p.m.11 views

CVE-2023-2773

A vulnerability has been found in code-projects Bus Dispatch and Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file viewadmin.php. The manipulation of the argument adminid leads to sql injection. The attack can be launched...

8.8CVSS7.3AI score0.00291EPSS
Exploits0References3
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.3 views

Bus Dispatch and Information System SQL注入漏洞

Bus Dispatch and Information System is a bus dispatch and information system. A SQL injection vulnerability exists in Bus Dispatch and Information System version 1.0, which stems from an unknown function in viewadmin.php that causes sql injection via the parameter adminid...

8.8CVSS7.1AI score0.00291EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/17 12:0 a.m.2 views

Bus Dispatch and Information System SQL注入漏洞

Bus Dispatch and Information System is a bus dispatch and information system. A SQL injection vulnerability exists in Bus Dispatch and Information System version 1.0, which stems from an unknown function in viewadmin.php that causes sql injection via the parameter branchid...

9.8CVSS7.1AI score0.00297EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/09/28 12:0 a.m.2 views

Bytebase 授权问题漏洞

Bytebase is Bytebase's open source web-based, zero-configuration, dependency-free database schema change and version control management tool for DevOps teams. projects", which can be exploited by an attacker to view "projects" created by "Admin"...

4.3CVSS6.8AI score0.00181EPSS
Exploits1References3
OSV
OSV
added 2021/07/07 1:15 p.m.3 views

CVE-2021-34627

A vulnerability in the getSelectedMimeTypesByRole function of the WP Upload Restriction WordPress plugin allows low-level authenticated users to view custom extensions added by administrators. This issue affects versions 2.2.3 and prior...

4.3CVSS5.8AI score0.00312EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2019/09/20 12:0 a.m.3 views

PT-2019-6425 · Ruijie · Ruijie Eg-2000Se

Name of the Vulnerable Software and Affected Versions: Ruijie EG-2000SE versions 11.9 B11P1 Description: The issue is related to the newcli.php API interface in the Ruijie EG-2000SE gateway, which lacks access control. This allows an attacker with web interface access to use TELNET commands and...

9.8CVSS7.6AI score0.00115EPSS
Exploits1References5
Rows per page
Query Builder