KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and…
Błąd w Traefik umożliwia nieautoryzowanym użytkownikom dostęp do poświadczeń backendu.
A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be…
A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
Korupcja pamięci w ProxySQL umożliwia zdalne wykonanie kodu przez nieautoryzowanego klienta.
A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be…
Wykorzystanie podatności w set-in pozwala na zanieczyszczenie Object.prototype.
Wstrzyknięcie SQL w Simple Cafe Ordering System umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w itsourcecode Online Frozen Foods Ordering System umożliwia zdalne ataki.
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie kodu.
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne ataki na bazę danych.
A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to…
A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried…
Przepełnienie bufora w GNU C Library może prowadzić do błędu w pamięci heap.
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie nieautoryzowanych zapytań.
A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has…
Wstrzyknięcie SQL w FantasticLBP Hotels_Server umożliwia zdalne ataki na bazę danych.
A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is possible. The exploit has been made…
A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed…
Wstrzyknięcie SQL w Advanced Library Management System umożliwia zdalne wykonanie ataku.
A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection. The attack may be initiated remotely. The…
A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public…
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A security vulnerability has been detected in SourceCodester Survey Application System 1.0. | A security vulnerability has been detected in SourceCodester Survey Application System 1.0. This affects an unknown function of the file /view_survey.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and… |
Pilne działanie | 9,8 | 0,48 % | ||
| Błąd w Traefik umożliwia nieautoryzowanym użytkownikom dostęp do poświadczeń backendu. | Błąd w Traefik umożliwia nieautoryzowanym użytkownikom dostęp do poświadczeń backendu. |
Pilne działanie | 9,8 | 0,48 % | ||
| A vulnerability has been found in code-projects Student Information System 2.0. | A vulnerability has been found in code-projects Student Information System 2.0. This issue affects some unknown processing of the file /register.php. The manipulation leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be… |
Pilne działanie | 9,8 | 0,47 % | ||
| A flaw has been found in code-projects Student Information System 2.0. | A flaw has been found in code-projects Student Information System 2.0. This vulnerability affects unknown code of the file /index.php. Executing manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. |
Pilne działanie | 9,8 | 0,47 % | ||
| A vulnerability was detected in code-projects Student Information System 2.0. | A vulnerability was detected in code-projects Student Information System 2.0. This affects an unknown part of the file /searchquery.php. Performing manipulation of the argument s results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. |
Pilne działanie | 9,8 | 0,47 % | ||
| A flaw has been found in itsourcecode Billing System 1.0. | A flaw has been found in itsourcecode Billing System 1.0. This affects an unknown function of the file /admin/app/login_crud.php. Executing a manipulation of the argument Password can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. |
Pilne działanie | 9,8 | 0,47 % | ||
| Korupcja pamięci w ProxySQL umożliwia zdalne wykonanie kodu przez nieautoryzowanego klienta. | Korupcja pamięci w ProxySQL umożliwia zdalne wykonanie kodu przez nieautoryzowanego klienta. |
Pilne działanie | 9,8 | 0,47 % | ||
| A flaw has been found in campcodes Online Student Enrollment System 1.0. | A flaw has been found in campcodes Online Student Enrollment System 1.0. This impacts an unknown function of the file /admin/register.php. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has been published and may be… |
Pilne działanie | 9,8 | 0,47 % | ||
| Wykorzystanie podatności w set-in pozwala na zanieczyszczenie Object.prototype. | Wykorzystanie podatności w set-in pozwala na zanieczyszczenie Object.prototype. |
Pilne działanie | 9,8 | 0,46 % | ||
| Wstrzyknięcie SQL w Simple Cafe Ordering System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Simple Cafe Ordering System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,46 % | ||
| Wstrzyknięcie SQL w itsourcecode Online Frozen Foods Ordering System umożliwia zdalne ataki. | Wstrzyknięcie SQL w itsourcecode Online Frozen Foods Ordering System umożliwia zdalne ataki. |
Pilne działanie | 9,8 | 0,46 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie kodu. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie kodu. |
Pilne działanie | 9,8 | 0,46 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,46 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne ataki na bazę danych. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne ataki na bazę danych. |
Pilne działanie | 9,8 | 0,46 % | ||
| A vulnerability has been found in SeaCMS up to 13.3. | A vulnerability has been found in SeaCMS up to 13.3. The affected element is an unknown function of the file js/player/dmplayer/dmku/class/mysqli.class.php. Such manipulation of the argument page/limit leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to… |
Pilne działanie | 9,8 | 0,45 % | ||
| A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. | A flaw has been found in FantasticLBP Hotels Server up to 67b44df162fab26df209bd5d5d542875fcbec1d0. This vulnerability affects unknown code of the file /controller/api/hotelList.php. This manipulation of the argument pickedHotelName/type causes sql injection. The attack is possible to be carried… |
Pilne działanie | 9,8 | 0,45 % | ||
| Przepełnienie bufora w GNU C Library może prowadzić do błędu w pamięci heap. | Przepełnienie bufora w GNU C Library może prowadzić do błędu w pamięci heap. |
Pilne działanie | 9,8 | 0,45 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie nieautoryzowanych zapytań. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie nieautoryzowanych zapytań. |
Pilne działanie | 9,8 | 0,45 % | ||
| A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. | A security flaw has been discovered in itsourcecode Online Loan Management System 1.0. The affected element is an unknown function of the file /manage_user.php. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has… |
Pilne działanie | 9,8 | 0,45 % | ||
| Wstrzyknięcie SQL w FantasticLBP Hotels_Server umożliwia zdalne ataki na bazę danych. | Wstrzyknięcie SQL w FantasticLBP Hotels_Server umożliwia zdalne ataki na bazę danych. |
Pilne działanie | 9,8 | 0,44 % | ||
| A vulnerability was found in code-projects Simple Attendance Record System 2.0. | A vulnerability was found in code-projects Simple Attendance Record System 2.0. The affected element is an unknown function of the file /check.php. Performing manipulation of the argument student results in sql injection. Remote exploitation of the attack is possible. The exploit has been made… |
Pilne działanie | 9,8 | 0,44 % | ||
| A security vulnerability has been detected in code-projects Prison Management System 2.0. | A security vulnerability has been detected in code-projects Prison Management System 2.0. Impacted is an unknown function of the file /admin/search1.php. The manipulation of the argument keyname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed… |
Pilne działanie | 9,8 | 0,44 % | ||
| Wstrzyknięcie SQL w Advanced Library Management System umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Advanced Library Management System umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,44 % | ||
| A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. | A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection. The attack may be initiated remotely. The… |
Pilne działanie | 9,8 | 0,44 % | ||
| A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. | A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public… |
Pilne działanie | 9,8 | 0,44 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.