Show filters
71,179 Total Results
Displaying 351-360 of 10,000
Refine your search criteria for more targeted results.
Sort by:
Attacker Value
Very High
CVE-2021-44655
Disclosure Date: December 15, 2021 (last updated October 07, 2023)
Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get admin access on the application.
2
Attacker Value
Low
CVE-2021-38759
Disclosure Date: December 07, 2021 (last updated October 07, 2023)
Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.
1
Attacker Value
Very High
CVE-2021-42580
Disclosure Date: November 15, 2021 (last updated December 22, 2024)
Sourcecodester Online Learning System 2.0 is vunlerable to sql injection authentication bypass in admin login file (/admin/login.php) and authenticated file upload in (Master.php) file , we can craft these two vunlerablities to get unauthenticated remote command execution.
2
Attacker Value
Moderate
CVE-2021-42847
Disclosure Date: November 11, 2021 (last updated October 07, 2023)
Zoho ManageEngine ADAudit Plus before 7006 allows attackers to write to, and execute, arbitrary files.
2
Attacker Value
Very High
CVE-2021-42671
Disclosure Date: November 05, 2021 (last updated November 28, 2024)
An incorrect access control vulnerability exists in Sourcecodester Engineers Online Portal in PHP in nia_munoz_monitoring_system/admin/uploads. An attacker can leverage this vulnerability in order to bypass access controls and access all the files uploaded to the web server without the need of authentication or authorization.
2
Attacker Value
Very High
CVE-2021-42665
Disclosure Date: November 05, 2021 (last updated November 28, 2024)
An SQL Injection vulnerability exists in Sourcecodester Engineers Online Portal in PHP via the login form inside of index.php, which can allow an attacker to bypass authentication.
2
Attacker Value
Very High
CVE-2021-42667
Disclosure Date: November 05, 2021 (last updated November 28, 2024)
A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some cases he can use this vulnerability in order to get a remote code execution on the remote web server.
2
Attacker Value
Very High
CVE-2021-41492
Disclosure Date: November 03, 2021 (last updated November 28, 2024)
Multiple SQL Injection vulnerabilities exist in Sourcecodester Simple Cashiering System (POS) 1.0 via the (1) Product Code in the pos page in cashiering. (2) id parameter in manage_products and the (3) t paramater in actions.php.
2
Attacker Value
Very High
CVE-2021-43140
Disclosure Date: November 03, 2021 (last updated November 28, 2024)
SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login.
2
Attacker Value
Very High
CVE-2021-43130
Disclosure Date: November 03, 2021 (last updated November 28, 2024)
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.
2
