KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manage_loan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.
A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /load_fields.php. The manipulation of the argument loan_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may…
A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be…
A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be…
Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku.
A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used.
SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid…
Korupcja pamięci w matio może prowadzić do awarii aplikacji z powodu błędnych danych wejściowych.
SQL Injection w PHPGurukul Online Shopping Portal umożliwia nieautoryzowany dostęp do danych.
SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter.
A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made…
A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been…
A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the file /admin_class.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The…
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku.
Wstrzyknięcie SQL w systemie zamówień ciast itsourcecode umożliwia zdalne manipulowanie danymi.
Wstrzyknięcie SQL w Chanjet CRM umożliwia zdalne wykonanie ataku.
A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might…
A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.
Błąd w keras umożliwia zdalne wykonanie dowolnego kodu przez nieprawidłowe deserializowanie.
Brak uwierzytelnienia w mdserver-web pozwala na zdalne wykonanie poleceń.
Brak walidacji w ArchiveBox umożliwia zdalne wykonanie kodu przez wstrzyknięcie argumentów.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| A vulnerability was found in itsourcecode Online Loan Management System 1.0. | A vulnerability was found in itsourcecode Online Loan Management System 1.0. This vulnerability affects unknown code of the file /manage_loan.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used. |
Pilne działanie | 9,8 | 0,42 % | ||
| A vulnerability has been found in itsourcecode Online Loan Management System 1.0. | A vulnerability has been found in itsourcecode Online Loan Management System 1.0. This affects an unknown part of the file /load_fields.php. The manipulation of the argument loan_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may… |
Pilne działanie | 9,8 | 0,42 % | ||
| A vulnerability was detected in code-projects Responsive Hotel Site 1.0. | A vulnerability was detected in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/usersettingdel.php. Performing manipulation of the argument eid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be… |
Pilne działanie | 9,8 | 0,41 % | ||
| A flaw has been found in code-projects Responsive Hotel Site 1.0. | A flaw has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/usersetting.php. Executing manipulation of the argument usname can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be… |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Responsive Hotel Site umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,41 % | ||
| A vulnerability was identified in itsourcecode Online Loan Management System 1.0. | A vulnerability was identified in itsourcecode Online Loan Management System 1.0. Impacted is an unknown function of the file /manage_payment.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used. |
Pilne działanie | 9,8 | 0,41 % | ||
| SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing… | SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, including administrator accounts, password hashes, database structure, and other critical data via the shouji and userid… |
Pilne działanie | 9,8 | 0,41 % | ||
| Korupcja pamięci w matio może prowadzić do awarii aplikacji z powodu błędnych danych wejściowych. | Korupcja pamięci w matio może prowadzić do awarii aplikacji z powodu błędnych danych wejściowych. |
Pilne działanie | 9,8 | 0,41 % | ||
| SQL Injection w PHPGurukul Online Shopping Portal umożliwia nieautoryzowany dostęp do danych. | SQL Injection w PHPGurukul Online Shopping Portal umożliwia nieautoryzowany dostęp do danych. |
Pilne działanie | 9,8 | 0,41 % | ||
| SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows… | SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary SQL commands via the appointmentID parameter. |
Pilne działanie | 9,8 | 0,41 % | ||
| A weakness has been identified in SourceCodester Best House Rental Management System 1.0. | A weakness has been identified in SourceCodester Best House Rental Management System 1.0. Impacted is the function delete_payment of the file /admin_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made… |
Pilne działanie | 9,8 | 0,41 % | ||
| A flaw has been found in SourceCodester Best House Rental Management System 1.0. | A flaw has been found in SourceCodester Best House Rental Management System 1.0. Affected by this issue is the function save_tenant of the file /admin_class.php. Executing manipulation of the argument firstname can lead to sql injection. The attack can be launched remotely. The exploit has been… |
Pilne działanie | 9,8 | 0,41 % | ||
| A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. | A vulnerability was detected in SourceCodester Best House Rental Management System 1.0. Affected by this vulnerability is the function save_category of the file /admin_class.php. Performing manipulation of the argument Name results in sql injection. The attack can be initiated remotely. The… |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,41 % | ||
| Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Yonyou KSOA 9.0 umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,4 % | ||
| Wstrzyknięcie SQL w systemie zamówień ciast itsourcecode umożliwia zdalne manipulowanie danymi. | Wstrzyknięcie SQL w systemie zamówień ciast itsourcecode umożliwia zdalne manipulowanie danymi. |
Pilne działanie | 9,8 | 0,4 % | ||
| Wstrzyknięcie SQL w Chanjet CRM umożliwia zdalne wykonanie ataku. | Wstrzyknięcie SQL w Chanjet CRM umożliwia zdalne wykonanie ataku. |
Pilne działanie | 9,8 | 0,4 % | ||
| A vulnerability was identified in SourceCodester Online Shop Project 1.0. | A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might… |
Pilne działanie | 9,8 | 0,4 % | ||
| A vulnerability was found in code-projects Online Shop Project 1.0. | A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. |
Pilne działanie | 9,8 | 0,4 % | ||
| Błąd w keras umożliwia zdalne wykonanie dowolnego kodu przez nieprawidłowe deserializowanie. | Błąd w keras umożliwia zdalne wykonanie dowolnego kodu przez nieprawidłowe deserializowanie. |
Pilne działanie | 9,8 | 0,4 % | ||
| Brak uwierzytelnienia w mdserver-web pozwala na zdalne wykonanie poleceń. | Brak uwierzytelnienia w mdserver-web pozwala na zdalne wykonanie poleceń. |
Pilne działanie | 9,8 | 0,4 % | ||
| Brak walidacji w ArchiveBox umożliwia zdalne wykonanie kodu przez wstrzyknięcie argumentów. | Brak walidacji w ArchiveBox umożliwia zdalne wykonanie kodu przez wstrzyknięcie argumentów. |
Pilne działanie | 9,8 | 0,4 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.