Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 2025/12/18 12:36 a.m.5 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS8.1AI score0.00171EPSS
Exploits1References1
EUVD
EUVD
added 2025/12/17 6:31 p.m.3 views

EUVD-2025-203900

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS7.5AI score0.00171EPSS
Exploits1References2
OSV
OSV
added 2025/12/17 5:15 p.m.3 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS5.8AI score0.00171EPSS
Exploits1References1
NVD
NVD
added 2025/12/17 5:15 p.m.4 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.3CVSS0.00171EPSS
Exploits1References1
CVE
CVE
added 2025/12/17 12:0 a.m.13 views

CVE-2025-67285

CVE-2025-67285 affects ITSourcecode COVID Tracking System Using QR-Code v1.0. The vulnerability is a SQL injection in the file /cts/admin/?page=zone where the parameter id is injected directly into SQL queries without proper sanitization/validation. This is consistently described across multiple ...

7.3CVSS7.7AI score0.00171EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/12/17 12:0 a.m.26 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

0.00171EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/12/17 12:0 a.m.2 views

CVE-2025-67285

A SQL injection vulnerability was found in the '/cts/admin/?page=zone' file of ITSourcecode COVID Tracking System Using QR-Code v1.0. The reason for this issue is that attackers inject malicious code from the parameter 'id' and use it directly in SQL queries without the need for appropriate...

7.7AI score0.00171EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/12/17 12:0 a.m.4 views

PT-2025-51841

Name of the Vulnerable Software and Affected Versions ITSourcecode COVID Tracking System Using QR-Code version 1.0 Description A SQL injection issue exists in the '/cts/admin/?page=zone' file. The issue occurs because malicious code can be injected through the id parameter and directly used in SQ...

7.3CVSS7.8AI score0.00171EPSS
Exploits1References5
EUVD
EUVD
added 2025/12/13 12:30 a.m.4 views

EUVD-2025-203175

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

7.5CVSS6.5AI score0.00357EPSS
Exploits1References7
OSV
OSV
added 2025/12/12 11:15 p.m.1 views

CVE-2025-14585

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/?page=zone. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS5.7AI score0.00357EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/12 12:0 a.m.2 views

itsourcecode COVID Tracking System SQL注入漏洞

itsourcecode COVID Tracking System is a new coronavirus tracking system open-sourced by itsourcecode. An SQL injection vulnerability exists in version 1.0 of itsourcecode COVID Tracking System, which stems from a misuse of the parameter ID in the file /admin/?page=zone, which could lead to an SQL...

9.8CVSS7.8AI score0.00357EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.5 views

PT-2025-51032

Name of the Vulnerable Software and Affected Versions itsourcecode COVID Tracking System version 1.0 Description A SQL injection issue exists in an unknown functionality of the file '/admin/?page=zone'. The ID argument can be manipulated to exploit this issue, potentially allowing for remote...

9.8CVSS7.5AI score0.00357EPSS
Exploits1References11
RedhatCVE
RedhatCVE
added 2025/05/23 3:19 a.m.3 views

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

4.8CVSS5.8AI score0.00649EPSS
Exploits1References1
OSV
OSV
added 2023/04/28 9:15 p.m.3 views

CVE-2023-2392

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ManualDate.minutes leads to cross site...

4.8CVSS3.7AI score0.00649EPSS
Exploits1References3
OSV
OSV
added 2023/04/28 9:15 p.m.3 views

CVE-2023-2391

A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server2 leads to cross site...

4.8CVSS3.7AI score0.00649EPSS
Exploits1References3
OSV
OSV
added 2023/04/28 8:15 p.m.3 views

CVE-2023-2390

A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/platform.cgi?page=timezone.htm of the component Web Management Interface. The manipulation of the argument ntp.server1 leads to cross site...

4.8CVSS3.6AI score0.00663EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/04/13 12:0 a.m.2 views

PT-2023-2600 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability exists in the Web Management Interface of the Netgear SRX5308, allowing for cross-site scripting attacks. This is due to the lack of protection measures for the web page...

4.8CVSS3.9AI score0.00649EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/04/13 12:0 a.m.2 views

PT-2023-2601 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: The issue exists due to insufficient input validation in the web management interface of the Netgear SRX5308 router's embedded software. Exploitation of this issue may allow a remote attacke...

4.8CVSS4.1AI score0.00649EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2023/04/13 12:0 a.m.2 views

PT-2023-2602 · NetGear · Netgear Srx5308

Name of the Vulnerable Software and Affected Versions: Netgear SRX5308 versions up to 4.3.5-3 Description: A vulnerability has been found in the Web Management Interface of Netgear SRX5308, affecting unknown code of the file scgi-bin/platform.cgi?page=time zone.htm. The manipulation of the...

4.8CVSS4.1AI score0.00663EPSS
Exploits1References9
Rows per page
Query Builder