Lucene search
K

13 matches found

NVD
NVD
added 4 days ago10 views

CVE-2026-10249

A vulnerability was identified in itsourcecode Online Blood Bank Management System 1.0. Impacted is an unknown function of the file /admin/viewrequest.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might...

7.5CVSS0.00033EPSS
Exploits0References6
CNNVD
CNNVD
added 4 days ago6 views

Itsourcecode Online Blood Bank Management System SQL Injection Vulnerability

itsourcecode Online Blood Bank Management System is an open-source online blood bank management system developed by itsourcecode. Version 1.0 of the system has a SQL injection vulnerability, which stems from improper handling of the parameter ID in the file/admin/viewrequest.php, potentially...

7.5CVSS7.2AI score0.00033EPSS
Exploits0References6
CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

Online Nurse Hiring System view-request.php File SQL Injection Vulnerability

Online Nurse Hiring System is an online nurse hiring system. Online Nurse Hiring System suffers from a SQL injection vulnerability that originates from the lack of validation of the viewid parameter in the file /admin/view-request.php against an externally-entered SQL statement. An attacker can u...

8.8CVSS8.3AI score0.00197EPSS
Exploits1References1
OSV
OSV
added 2025/04/29 8:15 p.m.0 views

CVE-2025-4080

A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-request.php. The manipulation of the argument viewid leads to sql injection. The attack can be launched...

8.8CVSS5.8AI score
Exploits0References5
CNNVD
CNNVD
added 2025/04/29 12:0 a.m.1 views

PHPGurukul Online Nurse Hiring System 安全漏洞

PHPGurukul Online Nurse Hiring System is an online nurse hiring system from PHPGurukul, Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Nurse Hiring System, which stems from improper handling of the parameter viewid in the file /admin/view-request.php, which could lea...

8.8CVSS6.9AI score0.00197EPSS
Exploits1References1
OSV
OSV
added 2023/08/08 12:15 p.m.1 views

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

7.2CVSS5.7AI score0.00224EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2023/08/08 12:15 p.m.0 views

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

7.2CVSS6.9AI score0.00224EPSS
Exploits1References4
Prion
Prion
added 2023/08/08 12:15 p.m.17 views

Cross site scripting

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

5.8CVSS6.5AI score0.00224EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2023/08/08 12:0 a.m.13 views

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

6.8AI score0.00224EPSS
Exploits1References3
OSV
OSV
added 2022/06/02 2:16 p.m.0 views

CVE-2022-31982

Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=requests/viewrequest&id=...

7.2CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/06/02 12:0 a.m.1 views

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/admin/?page=requests/ viewrequest&id=Lack of validation of external input SQL statement...

7.2CVSS6AI score0.08046EPSS
Exploits1References2
OSV
OSV
added 2019/04/30 6:29 p.m.1 views

CVE-2019-10272

An issue was discovered in Weaver e-cology 9.0. There is a CRLF Injection vulnerability via the /workflow/request/ViewRequestForwardSPA.jsp isintervenor parameter, as demonstrated by the %0aSet-cookie: substring...

6.1CVSS6.3AI score
Exploits0References2
Cvelist
Cvelist
added 2014/09/30 2:0 p.m.17 views

CVE-2012-5505

atat.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to read private data structures via a request for a view without a name...

6.4AI score0.00319EPSS
Exploits0References4
Rows per page
Query Builder