Export limit exceeded: 18935 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (18935 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2023-5008 | 1 Imsurajghosh | 1 Student Information System | 2024-11-21 | 9.8 Critical |
| Student Information System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'regno' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control. | ||||
| CVE-2023-5004 | 1 Projectworlds | 1 Hospital Management System In Php | 2024-11-21 | 9.8 Critical |
| Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. | ||||
| CVE-2023-52096 | 1 Steve-community | 1 Ocpp-jaxb | 2024-11-21 | 7.5 High |
| SteVe Community ocpp-jaxb before 0.0.8 generates invalid timestamps such as ones with month 00 in certain situations (such as when an application receives a StartTransaction Open Charge Point Protocol message with a timestamp parameter of 1000000). This may lead to a SQL exception in applications, and may undermine the integrity of transaction records. | ||||
| CVE-2023-51051 | 1 S-cms | 1 S-cms | 2024-11-21 | 9.8 Critical |
| S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php. | ||||
| CVE-2023-51050 | 1 S-cms | 1 S-cms | 2024-11-21 | 9.8 Critical |
| S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php. | ||||
| CVE-2023-51049 | 1 S-cms | 1 S-cms | 2024-11-21 | 9.8 Critical |
| S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php. | ||||
| CVE-2023-51048 | 1 S-cms | 1 S-cms | 2024-11-21 | 9.8 Critical |
| S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php. | ||||
| CVE-2023-50752 | 1 Kashipara | 1 Online Notice Board System | 2024-11-21 | 9.8 Critical |
| Online Notice Board System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'e' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database. | ||||
| CVE-2023-50589 | 1 Embras | 1 Geosiap Erp | 2024-11-21 | 9.8 Critical |
| Grupo Embras GEOSIAP ERP v2.2.167.02 was discovered to contain a SQL injection vulnerability via the codLogin parameter on the login page. | ||||
| CVE-2023-50578 | 1 Mingsoft | 1 Mcms | 2024-11-21 | 9.8 Critical |
| Mingsoft MCMS v5.2.9 was discovered to contain a SQL injection vulnerability via the categoryType parameter at /content/list.do. | ||||
| CVE-2023-50563 | 1 Sem-cms | 1 Semcms | 2024-11-21 | 9.8 Critical |
| Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. | ||||
| CVE-2023-50429 | 1 Izybat | 1 Orange Casiers | 2024-11-21 | 9.1 Critical |
| IzyBat Orange casiers before 20230803_1 allows getEnsemble.php ensemble SQL injection. | ||||
| CVE-2023-50073 | 1 Leadscloud | 1 Empirecms | 2024-11-21 | 9.8 Critical |
| EmpireCMS v7.5 was discovered to contain a SQL injection vulnerability via the ftppassword parameter at SetEnews.php. | ||||
| CVE-2023-50071 | 1 Customer Support System Project | 1 Customer Support System | 2024-11-21 | 8.8 High |
| Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_department via id or name. | ||||
| CVE-2023-50070 | 1 Oretnom23 | 1 Customer Support System | 2024-11-21 | 8.8 High |
| Sourcecodester Customer Support System 1.0 has multiple SQL injection vulnerabilities in /customer_support/ajax.php?action=save_ticket via department_id, customer_id, and subject. | ||||
| CVE-2023-50061 | 1 Store-opart | 1 Op\'art Easy Redirect | 2024-11-21 | 9.8 Critical |
| PrestaShop Op'art Easy Redirect >= 1.3.8 and <= 1.3.12 is vulnerable to SQL Injection via Oparteasyredirect::hookActionDispatcher(). | ||||
| CVE-2023-50035 | 1 Small Crm Project | 1 Small Crm | 2024-11-21 | 9.8 Critical |
| PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL query without any sanitization and the SQL Injection payload being executed. | ||||
| CVE-2023-4987 | 1 Infinitietech | 1 Taskhub | 2024-11-21 | 5.5 Medium |
| A vulnerability, which was classified as critical, has been found in infinitietech taskhub 2.8.7. Affected by this issue is some unknown functionality of the file /home/get_tasks_list of the component GET Parameter Handler. The manipulation of the argument project/status/user_id/sort/search leads to sql injection. VDB-239798 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2023-4974 | 1 Creativeitem | 1 Academy Lms | 2024-11-21 | 6.3 Medium |
| A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument price_min/price_max leads to sql injection. The attack may be launched remotely. VDB-239750 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. | ||||
| CVE-2023-4928 | 1 Instantcms | 1 Icms2 | 2024-11-21 | 7.2 High |
| SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1. | ||||