Lucene search
+L

12457 matches found

OSV
OSV
added 2024/05/19 11:15 p.m.9 views

CVE-2024-5105

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. This affects an unknown part of the file /view/studentpaymentdetails.php. The manipulation of the argument index leads to sql injection. It is possible to initiate the attack...

8.8CVSS5.7AI score0.00509EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/19 10:15 p.m.9 views

CVE-2024-5104

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentgradewise.php. The manipulation of the argument grade leads to sql injection. The attack may be...

8.8CVSS6.5AI score0.00509EPSS
SaveExploits1References4
NVD
NVD
added 2024/05/19 9:15 p.m.32 views

CVE-2024-5103

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view/studentfirstpayment.php. The manipulation of the argument grade leads to sql injection. The attack...

8.8CVSS6.8AI score0.0051EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/19 12:00 a.m.11 views

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from the parameter grade in the file...

8.8CVSS7AI score0.00509EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/19 12:00 a.m.8 views

PT-2024-34513 · Campcodes · Campcodes Complete Web-Based School Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Complete Web-Based School Management System version 1.0 Description: A critical issue has been found in the processing of the file /view/student payment details2.php, where the manipulation of the index argument leads to SQL...

6.5CVSS7.1AI score0.00407EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2024/05/19 12:00 a.m.23 views

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in version 1.0 of the Campcodes Complete Web-Based School Management System, which stems from a parameter grade in the file...

8.8CVSS6.9AI score0.0051EPSS
SaveExploits1References5
OSV
OSV
added 2024/05/18 8:15 p.m.9 views

CVE-2024-5094

A vulnerability was found in SourceCodester Best House Rental Management System 1.0 and classified as critical. This issue affects some unknown processing of the file viewpayment.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has...

9.8CVSS5.7AI score0.00737EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/05/18 12:00 a.m.11 views

PT-2024-34463 · Sourcecodester · Sourcecodester Best House Rental Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Best House Rental Management System version 1.0 Description: A critical issue affects the processing of the file view payment.php. The manipulation of the id argument leads to SQL injection. The attack may be initiated remotely...

9.8CVSS8.4AI score0.00737EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2024/05/18 12:00 a.m.12 views

House Rental Management System SQL注入漏洞

House Rental Management System is a house rental management system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Best House Rental Management System version 1.0, which stems from a parameter id in the file view payment.php that can lead to SQL injecti...

9.8CVSS7.9AI score0.00737EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/05/17 12:00 a.m.15 views

PT-2024-34390 · Unknown · Sourcecodester Simple Online Mens Salon Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Online Mens Salon Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file view service.php. The manipulation of the id argument leads to...

9.8CVSS8.5AI score0.00579EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2024/05/17 12:00 a.m.9 views

Simple Online Mens Salon Management System SQL注入漏洞

Simple Online Mens Salon Management System is an open source men's salon management system. SourceCodester Simple Online Mens Salon Management System version 1.0 suffers from a SQL injection vulnerability that stems from a parameter id in the file viewservice.php that can lead to SQL injection...

9.8CVSS7AI score0.00579EPSS
SaveExploits1References5
NVD
NVD
added 2024/05/16 4:15 p.m.22 views

CVE-2024-4609

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

9.8CVSS6.9AI score0.00652EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/16 4:15 p.m.11 views

CVE-2024-4609

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

9.8CVSS5.8AI score0.00652EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/16 3:13 p.m.44 views

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

8.8CVSS7.2AI score0.00652EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/16 3:13 p.m.88 views

CVE-2024-4609

CVE-2024-4609 affects Rockwell Automation FactoryTalk View SE Datalog function. The vulnerability allows SQL injection when the SQL database has no authentication or legitimate credentials are stolen, potentially exposing sensitive information and allowing modification/deletion of remote database...

9.8CVSS7.1AI score0.00652EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/16 3:13 p.m.20 views

CVE-2024-4609 Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability

A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in...

8.8CVSS7.3AI score0.00652EPSS
SaveExploits0References1
ICS
ICS
added 2024/05/16 6:00 a.m.43 views

Rockwell Automation FactoryTalk View SE

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : FactoryTalk View SE Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

9.8CVSS7.1AI score0.00652EPSS
SaveExploits0References10
OSV
OSV
added 2024/05/16 5:15 a.m.13 views

CVE-2024-4945

A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file viewparcel.php. The manipulation of the argument id leads to unrestricted upload. It is possible to launch the attack remotely. The...

9.8CVSS4.9AI score0.00869EPSS
SaveExploits1References4
OSV
OSV
added 2024/05/16 4:15 a.m.10 views

CVE-2024-4930

A vulnerability classified as critical was found in SourceCodester Simple Online Bidding System 1.0. This vulnerability affects unknown code of the file /simple-online-bidding-system/index.php?page=viewprod. The manipulation of the argument id leads to sql injection. The attack can be initiated...

8.8CVSS5.8AI score0.0052EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/05/16 12:00 a.m.17 views

Rockwell Automation FactoryTalk View SE 安全漏洞

Rockwell Automation FactoryTalk View SE is an industrial automation system view interface from Rockwell Automation. Rockwell Automation FactoryTalk View SE suffers from a SQL injection vulnerability that can be exploited by an attacker to view, add, modify, or delete information in a back-end...

9.8CVSS7.6AI score0.00652EPSS
SaveExploits0References2
Rows per page
Query Builder