Lucene search
+L

138 matches found

Packet Storm
Packet Storm
•added 2024/09/30 12:00 a.m.•223 views

Sistem Penyewaan Baju atau Pakaian Berbasis Web 1.0 SQL Injection

============================================================================================================================================= | Title : Sistem Penyewaan Baju atau Pakaian Berbasis Web v1.0 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser...

7.4AI score
SaveExploits0
CNVD
CNVD
•added 2024/07/05 12:00 a.m.•49 views

MESbook server-side request forgery vulnerability

MESbook is a web-based system from MESbook Inc. connects to factory machines and converts data into information for real-time management. MESbook has a server-side request forgery vulnerability that can be exploited by an attacker to read the source code of a web file, read internal files or acce...

9.3CVSS6.8AI score0.00494EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/04 12:00 a.m.•47 views

MESbook Resource Management Error Vulnerability

MESbook is a web-based system from MESbook Inc. connects to factory machines and converts data into information for real-time management. MESbook has a resource management error vulnerability that can be exploited by an attacker to cause resource consumption and disable the application...

7.5CVSS6.5AI score0.0057EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/03 12:00 a.m.•15 views

MESbook 信息泄露漏洞

MESbook is a web-based system from MESbook Inc. connects to factory machines and converts data into information for real-time management. MESbook has an information disclosure vulnerability that can be exploited by a local attacker to access different resources by changing the application's API...

8.1CVSS6AI score0.00298EPSS
SaveExploits0References2
NVD
NVD
•added 2024/05/28 4:15 p.m.•32 views

CVE-2024-33800

A SQL injection vulnerability in /model/getstudent1.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

9.8CVSS8.1AI score0.0051EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/28 4:15 p.m.•37 views

CVE-2024-33802

A SQL injection vulnerability in /model/getstudentsubject.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the index parameter...

6.5CVSS8.1AI score0.00426EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/28 3:52 p.m.•28 views

CVE-2024-33808

A SQL injection vulnerability in /model/gettimetable.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

8.8AI score0.0051EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/28 3:51 p.m.•43 views

CVE-2024-33806

A SQL injection vulnerability in /model/getgrade.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

8.2AI score0.0051EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/28 3:50 p.m.•53 views

CVE-2024-33805

A SQL injection vulnerability in /model/getstudent.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

8.2AI score0.0051EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/05/28 3:50 p.m.•48 views

CVE-2024-33803

A SQL injection vulnerability in /model/getexam.php in campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the id parameter...

8.2AI score0.00286EPSS
SaveExploits1References1
NVD
NVD
•added 2024/05/23 5:15 p.m.•25 views

CVE-2024-34935

A SQL injection vulnerability in /view/conversationhistoryadmin.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the conversationid parameter...

9.8CVSS8.1AI score0.0051EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/05/23 4:34 p.m.•19 views

CVE-2024-34936

A SQL injection vulnerability in /view/event1.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the month parameter...

8.5AI score0.00377EPSS
SaveExploits1References1
CVE
CVE
•added 2024/05/23 4:34 p.m.•434 views

CVE-2024-34936

The Campcodes Complete Web-Based School Management System version 1.0 is vulnerable to a SQL injection flaw in the /view/event1.php API endpoint. An attacker can exploit this vulnerability by submitting arbitrary SQL commands via the month parameter. This allows for the execution of unauthorized ...

8.6CVSS8.5AI score0.00377EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/05/23 4:34 p.m.•123 views

CVE-2024-34935

The Campcodes Complete Web-Based School Management System version 1.0 is susceptible to a SQL injection vulnerability within the /view/conversation_history_admin.php API endpoint. An attacker can exploit this by providing malicious input through the conversation_id parameter to execute arbitrary ...

9.8CVSS8.5AI score0.0051EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/05/23 12:00 a.m.•18 views

Campcodes Complete Web-Based School Management System 安全漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A security vulnerability exists in the Complete Web-Based School Management System version 1.0. An attacker can exploit this vulnerability to execute arbitrary SQL commands via the...

9.8CVSS8AI score0.0051EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/05/20 3:00 a.m.•18 views

CVE-2024-5114 Campcodes Complete Web-Based School Management System teacher_attendance_history1.php sql injection

A vulnerability classified as critical has been found in Campcodes Complete Web-Based School Management System 1.0. Affected is an unknown function of the file /view/teacherattendancehistory1.php. The manipulation of the argument index leads to sql injection. It is possible to launch the attack...

6.5CVSS7.4AI score0.00458EPSS
SaveExploits1References4
OSV
OSV
•added 2024/05/19 10:15 p.m.•16 views

CVE-2024-5104

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /view/studentgradewise.php. The manipulation of the argument grade leads to sql injection. The attack may be...

8.8CVSS6.5AI score0.00509EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2024/05/19 12:00 a.m.•16 views

Campcodes Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Complete Web-Based School Management System version 1.0, which stems from the parameter index in the file...

6.5CVSS7.1AI score0.00407EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/05/19 12:00 a.m.•12 views

Complete Web-Based School Management System SQL注入漏洞

Campcodes Complete Web-Based School Management System is a Web-based school management system from Campcodes, Inc. A SQL injection vulnerability exists in Campcodes Complete Web-Based School Management System version 1.0, which stems from the parameter index in the file...

8.8CVSS7.1AI score0.0049EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2024/05/15 7:00 p.m.•26 views

CVE-2024-4908 Campcodes Complete Web-Based School Management System student_attendance_history1.php sql injection

A vulnerability was found in Campcodes Complete Web-Based School Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /view/studentattendancehistory1.php. The manipulation of the argument index leads to sql injection. The attack may be initiated...

6.5CVSS7.4AI score0.00407EPSS
SaveExploits1References4
Rows per page
Query Builder