Show filters
42,826 Total Results
Displaying 81-90 of 10,000
Refine your search criteria for more targeted results.
Sort by:
Attacker Value
Very High
CVE-2021-43130
Disclosure Date: November 03, 2021 (last updated February 23, 2025)
An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.
2
Attacker Value
Very High
CVE-2021-37806
Disclosure Date: October 27, 2021 (last updated February 23, 2025)
An SQL Injection vulnerability exists in https://phpgurukul.com Vehicle Parking Management System affected version 1.0. The system is vulnerable to time-based SQL injection on multiple endpoints. Based on the SLEEP(N) function payload that will sleep for a number of seconds used on the (1) editid , (2) viewid, and (3) catename parameters, the server response is about (N) seconds delay respectively which mean it is vulnerable to MySQL Blind (Time Based). An attacker can use sqlmap to further the exploitation for extracting sensitive information from the database.
2
Attacker Value
Very High
CVE-2021-41648
Disclosure Date: October 01, 2021 (last updated February 23, 2025)
An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.
2
Attacker Value
Unknown
CVE-2021-36260
Disclosure Date: September 22, 2021 (last updated February 23, 2025)
A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.
3
Attacker Value
Very High
CVE-2021-38754
Disclosure Date: August 16, 2021 (last updated February 23, 2025)
SQL Injection vulnerability in Hospital Management System due to lack of input validation in messearch.php.
2
Attacker Value
Very High
CVE-2021-35458
Disclosure Date: July 30, 2021 (last updated February 23, 2025)
Online Pet Shop We App 1.0 is vulnerable to Union SQL Injection in products.php (aka p=products) via the c or s parameter.
2
Attacker Value
Very High
CVE-2021-33470
Disclosure Date: May 26, 2021 (last updated February 22, 2025)
COVID19 Testing Management System 1.0 is vulnerable to SQL Injection via the admin panel.
2
Attacker Value
Very High
CVE-2021-26822
Disclosure Date: February 15, 2021 (last updated February 22, 2025)
Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks.
2
Attacker Value
High
CVE-2021-25646
Disclosure Date: January 29, 2021 (last updated November 08, 2023)
Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process.
1
Attacker Value
Very High
CVE-2020-10189
Disclosure Date: March 06, 2020 (last updated February 21, 2025)
Zoho ManageEngine Desktop Central before 10.0.474 allows remote code execution because of deserialization of untrusted data in getChartImage in the FileStorage class. This is related to the CewolfServlet and MDMLogUploaderServlet servlets.
0
