Show filters
11,866 Total Results
Displaying 31-40 of 10,000
Refine your search criteria for more targeted results.
Sort by:
Attacker Value
Very High
CVE-2023-23333
Disclosure Date: February 06, 2023 (last updated February 24, 2025)
There is a command injection vulnerability in SolarView Compact through 6.00, attackers can execute commands by bypassing internal restrictions through downloader.php.
2
Attacker Value
Moderate
CVE-2022-31129
Disclosure Date: July 06, 2022 (last updated February 24, 2025)
moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.
2
Attacker Value
Very High
CVE-2021-43420
Disclosure Date: January 24, 2022 (last updated February 23, 2025)
SQL injection vulnerability in Login.php in Sourcecodester Online Payment Hub v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter.
2
Attacker Value
Very High
CVE-2021-44655
Disclosure Date: December 15, 2021 (last updated February 23, 2025)
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application.
2
Attacker Value
Very High
CVE-2021-42667
Disclosure Date: November 05, 2021 (last updated February 23, 2025)
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
2
Attacker Value
Very High
CVE-2021-43130
Disclosure Date: November 03, 2021 (last updated February 23, 2025)
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.
2
Attacker Value
Moderate
CVE-2021-41947
Disclosure Date: October 08, 2021 (last updated February 23, 2025)
A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.
2
Attacker Value
Very High
CVE-2021-41511
Disclosure Date: October 04, 2021 (last updated February 23, 2025)
The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bypass authentication.
2
Attacker Value
Very High
CVE-2021-38840
Disclosure Date: September 07, 2021 (last updated February 23, 2025)
SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the water_refilling/classes/Login.php username parameter.
2
Attacker Value
Very High
CVE-2021-38754
Disclosure Date: August 16, 2021 (last updated February 23, 2025)
SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.
2
