Browse CVEs

CRITICAL 9.8 CVE-2022-36198 Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details… Bus Pass Management System No fix yet Fix from $2,3002022-08-22 MEDIUM 5.4 CVE-2020-23466 Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via … Online Marriage Registration System No fix yet Fix from $1,6002022-08-19 CRITICAL 9.8 CVE-2022-2803 A vulnerability was found in SourceCodester Zoo Management System and classified as critical. This issue affects some unknown processing of the file … Zoo Management System No fix yet Fix from $2,3002022-08-12 CRITICAL 9.8 CVE-2022-2804 A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /p… Zoo Management System No fix yet Fix from $2,3002022-08-12 MEDIUM 5.4 CVE-2022-33075 A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitr… Zoo Management System No fix yet Fix from $1,6002022-07-05 MEDIUM 6.1 CVE-2022-31897 SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=. Zoo Management System No fix yet Fix from $1,6002022-06-29 CRITICAL 9.8 CVE-2022-31382 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 CRITICAL 9.8 CVE-2022-31383 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 CRITICAL 9.8 CVE-2022-31384 Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. Directory Management System Mitigation only Fix from $2,3002022-06-16 MEDIUM 5.4 CVE-2022-31914 Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. Zoo Management System No fix yet Fix from $1,6002022-06-16 MEDIUM 6.1 CVE-2021-4232 A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticke… Zoo Management System Mitigation only Fix from $1,6002022-05-26 MEDIUM 6.1 CVE-2022-29004 Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php. E Diary Management System No fix yet Fix from $1,6002022-05-23 MEDIUM 6.1 CVE-2022-29005 Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers … Online Birth Certificate System Mitigation only Fix from $1,6002022-05-23 MEDIUM 5.4 CVE-2022-1816 A vulnerability, which was classified as problematic, has been found in Zoo Management System 1.0. Affected by this issue is /zoo/admin/public_html/v… Zoo Management System Mitigation only Fix from $1,6002022-05-23 HIGH 8.8 CVE-2022-28992 A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request. Online Banquet Booking System No fix yet Fix from $1,9502022-05-20 CRITICAL 9.8 CVE-2022-29009EPSS 23% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allow… Cyber Cafe Management System No fix yet Fix from $2,3002022-05-11 MEDIUM 6.5 CVE-2022-29008 An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensit… Bus Pass Management System No fix yet Fix from $1,6002022-05-11 CRITICAL 9.8 CVE-2022-29006EPSS 19% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attacke… Directory Management System No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-29007EPSS 19% Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows a… Dairy Farm Shop Management System No fix yet Fix from $2,3002022-05-11 CRITICAL 9.8 CVE-2022-27351 Zoo Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via /public_html/apply_vacancy. This vulnerability allows… Zoo Management System No fix yet Fix from $2,3002022-04-08 HIGH 8.8 CVE-2022-27992 Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter. Zoo Management System No fix yet Fix from $1,9502022-04-08 CRITICAL 9.8 CVE-2021-46110 Online Shopping Portal v3.1 was discovered to contain multiple time-based SQL injection vulnerabilities via the email and contactno parameters. Online Shopping Portal No fix yet Fix from $2,3002022-02-18 HIGH 7.5 CVE-2022-24226 Hospital Management System v4.0 was discovered to contain a blind SQL injection vulnerability via the register function in func2.php. Hospital Management System No fix yet Fix from $1,9502022-02-15 CRITICAL 9.8 CVE-2020-36062 Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the contro… Dairy Farm Shop Management System No fix yet Fix from $2,3002022-02-11 HIGH 7.5 CVE-2022-24646 Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/contact.php via the txt… Hospital Management System No fix yet Fix from $1,9502022-02-10 CRITICAL 9.8 CVE-2022-24263EPSS 8% Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email … Hospital Management System No fix yet Fix from $2,3002022-01-31 HIGH 7.5 CVE-2021-44315 In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of t… Bus Pass Management System No fix yet Fix from $1,9502021-12-16 MEDIUM 5.4 CVE-2021-44317 In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability. Bus Pass Management System No fix yet Fix from $1,6002021-12-16 CRITICAL 9.8 CVE-2021-44966 SQL injection bypass authentication vulnerability in PHPGURUKUL Employee Record Management System 1.2 via index.php. An attacker can log in as an adm… Employee Record Management System No fix yet Fix from $2,3002021-12-13 HIGH 7.5 CVE-2021-44965 Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 The attacker can retrieve and d… Employee Record Management System No fix yet Fix from $1,9502021-12-13