Export limit exceeded: 18747 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (18747 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-29985 | 1 Oretnom23 | 1 Student Study Center Desk Management System | 2025-01-22 | 9.8 Critical |
| Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.php#date_from has a SQL Injection vulnerability. | ||||
| CVE-2025-0203 | 1 Code-projects | 1 Student Management System | 2025-01-22 | 6.3 Medium |
| A vulnerability was found in code-projects Student Management System 1.0. It has been declared as critical. This vulnerability affects the function showSubject1 of the file /config/DbFunction.php. The manipulation of the argument sid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. | ||||
| CVE-2025-0204 | 1 Code-projects | 1 Online Shoe Store | 2025-01-22 | 6.3 Medium |
| A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2025-0205 | 1 Code-projects | 1 Online Shoe Store | 2025-01-22 | 6.3 Medium |
| A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. Affected is an unknown function of the file /details2.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. | ||||
| CVE-2023-23775 | 1 Fortinet | 1 Fortisoar | 2025-01-21 | 5.9 Medium |
| Multiple improper neutralization of special elements used in SQL commands ('SQL Injection') vulnerabilities [CWE-89] in FortiSOAR 7.2.0 and before 7.0.3 may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted strings parameters. | ||||
| CVE-2023-2832 | 1 Bumsys Project | 1 Bumsys | 2025-01-21 | 7.2 High |
| SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0. | ||||
| CVE-2023-31707 | 1 Sem-cms | 1 Semcms | 2025-01-21 | 9.8 Critical |
| SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. | ||||
| CVE-2024-2022 | 1 Netentsec | 1 Application Security Gateway | 2025-01-21 | 6.3 Medium |
| A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-255301 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2024-2021 | 1 Netentsec | 1 Application Security Gateway | 2025-01-21 | 6.3 Medium |
| A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuser.php. The manipulation of the argument ResId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-255300. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2023-31752 | 1 Oretnom23 | 1 Employee And Visitor Gate Pass Logging System | 2025-01-17 | 9.8 Critical |
| SourceCodester Employee and Visitor Gate Pass Logging System v1.0 is vulnerable to SQL Injection via /employee_gatepass/classes/Login.php. | ||||
| CVE-2024-11773 | 1 Ivanti | 1 Cloud Services Appliance | 2025-01-17 | 9.1 Critical |
| SQL injection in the admin web console of Ivanti CSA before version 5.0.3 allows a remote authenticated attacker with admin privileges to run arbitrary SQL statements. | ||||
| CVE-2024-3315 | 1 Oretnom23 | 1 Computer Laboratory Management System | 2025-01-17 | 6.3 Medium |
| A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file classes/user.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-259386 is the identifier assigned to this vulnerability. | ||||
| CVE-2024-3316 | 2 Computer Laboratory Management System Project, Oretnom23 | 2 Computer Laboratory Management System, Computer Laboratory Management System | 2025-01-17 | 6.3 Medium |
| A vulnerability was found in SourceCodester Computer Laboratory Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/category/view_category.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259387. | ||||
| CVE-2024-3425 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. Affected by this vulnerability is an unknown functionality of the file admin/activateall.php. The manipulation of the argument selector leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259597 was assigned to this vulnerability. | ||||
| CVE-2024-3424 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability classified as critical has been found in SourceCodester Online Courseware 1.0. Affected is an unknown function of the file admin/listscore.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259596. | ||||
| CVE-2022-30025 | 1 Credenceanalytics | 1 Ideal - Wealth And Funds | 2025-01-17 | 6.5 Medium |
| SQL injection in "/Framewrk/Home.jsp" file (POST method) in tCredence Analytics iDEAL Wealth and Funds - 1.0 iallows authenticated remote attackers to inject payload via "v" parameter. | ||||
| CVE-2024-3417 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability, which was classified as critical, has been found in SourceCodester Online Courseware 1.0. This issue affects some unknown processing of the file admin/saveeditt.php. The manipulation of the argument contact leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-259589 was assigned to this vulnerability. | ||||
| CVE-2024-3416 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability classified as critical was found in SourceCodester Online Courseware 1.0. This vulnerability affects unknown code of the file admin/editt.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259588. | ||||
| CVE-2024-3419 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability has been found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file admin/edit.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-259591. | ||||
| CVE-2024-3420 | 1 Argie | 1 Online Courseware | 2025-01-17 | 6.3 Medium |
| A vulnerability was found in SourceCodester Online Courseware 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file admin/saveedit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-259592. | ||||