xiumulty/CVE

GitHub

github.com

Releases0

Stars3

For CVE submission and retention

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-27202 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.
CVE-2023-27214 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/student/between-date-reprtsdetails.php.
CVE-2023-27213 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php.
CVE-2023-27212 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.
CVE-2023-27211 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.
CVE-2023-27210 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php.
CVE-2023-27208 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the redirect parameter.
CVE-2023-27207 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php.
CVE-2023-27206 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter.
CVE-2023-27205 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.
CVE-2023-27204 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.
CVE-2023-27203 ↗	Mar 9, 2023Thursday, 9 March 2023, 21:15	9.8 CRITICAL	—
Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php.
CVE-2023-24200 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php.
CVE-2023-24201 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php.
CVE-2023-24202 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php.
CVE-2023-24192 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	6.1 MEDIUM	—
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php.
CVE-2023-24191 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	6.1 MEDIUM	—
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php.
CVE-2023-24198 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters.
CVE-2023-24197 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	6.1 MEDIUM	—
Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php.
CVE-2023-24195 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	6.1 MEDIUM	—
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php.
CVE-2023-24194 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	6.1 MEDIUM	—
Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php.
CVE-2023-24199 ↗	Feb 6, 2023Monday, 6 February 2023, 15:15	9.8 CRITICAL	—
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php.
CVE-2022-47859 ↗	Jan 11, 2023Wednesday, 11 January 2023, 15:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the user_id parameter in changePassword.php.
CVE-2022-47864 ↗	Jan 11, 2023Wednesday, 11 January 2023, 15:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeCategories.php.
CVE-2022-47862 ↗	Jan 11, 2023Wednesday, 11 January 2023, 15:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the customer_id parameter in ajax_represent.php.
CVE-2022-47861 ↗	Jan 11, 2023Wednesday, 11 January 2023, 15:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeLead.php.
CVE-2022-47860 ↗	Jan 11, 2023Wednesday, 11 January 2023, 15:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeProduct.php.
CVE-2022-47866 ↗	Jan 11, 2023Wednesday, 11 January 2023, 14:15	9.8 CRITICAL	—
Lead management system v1.0 is vulnerable to SQL Injection via the id parameter in removeBrand.php.
CVE-2022-47865 ↗	Jan 11, 2023Wednesday, 11 January 2023, 14:15	9.8 CRITICAL	—
Lead Management System v1.0 is vulnerable to SQL Injection via the id parameter in removeOrder.php.