| Max CVSS | 7.5 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2018-18805 | 7.5 |
Point Of Sales 1.0 allows SQL injection via the login screen, related to LoginForm1.vb.
|
29-03-2022 - 18:05 | 16-11-2018 - 18:29 | |
| CVE-2018-18800 | 7.5 |
The Tubigan "Welcome to our Resort" 1.0 software allows SQL Injection via index.php?p=accomodation&q=[SQL], index.php?p=rooms&q=[SQL], or admin/login.php.
|
15-05-2019 - 16:13 | 14-05-2019 - 15:29 | |
| CVE-2018-18798 | 7.5 |
Attendance Monitoring System 1.0 has SQL Injection via the 'id' parameter to student/index.php?view=view, event/index.php?view=view, and user/index.php?view=view.
|
28-03-2019 - 17:35 | 21-03-2019 - 16:00 | |
| CVE-2018-18793 | 7.5 |
School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.
|
18-12-2018 - 15:06 | 16-11-2018 - 18:29 | |
| CVE-2018-18795 | 7.5 |
School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
|
18-12-2018 - 14:57 | 16-11-2018 - 18:29 | |
| CVE-2018-18794 | 6.8 |
School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
|
18-12-2018 - 14:56 | 16-11-2018 - 18:29 | |
| CVE-2018-18797 | 6.8 |
School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
|
18-12-2018 - 13:59 | 16-11-2018 - 18:29 | |
| CVE-2018-18799 | 6.8 |
School Attendance Monitoring System 1.0 has CSRF via event/controller.php?action=photos.
|
18-12-2018 - 13:58 | 16-11-2018 - 18:29 | |
| CVE-2018-18760 | 4.3 |
RhinOS 3.0 build 1190 allows CSRF.
|
17-12-2018 - 21:39 | 16-11-2018 - 18:29 | |
| CVE-2018-18804 | 7.5 |
Bakeshop Inventory System 1.0 has SQL injection via the login screen, related to include/publicfunction.vb.
|
17-12-2018 - 21:27 | 16-11-2018 - 18:29 | |
| CVE-2007-5511 | 6.5 |
SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package. NOTE: this is probably c
|
15-10-2018 - 21:45 | 17-10-2007 - 23:17 | |
| CVE-2010-3027 | 7.5 |
SQL injection vulnerability in index.php in Tycoon Baseball Script 1.0.9 allows remote attackers to execute arbitrary SQL commands via the game_id parameter in a game_player action.
|
17-08-2010 - 04:00 | 16-08-2010 - 20:00 |