CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2023-23156 |
| CRITICO9.8 |
Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page. |
| 27/02/2023 |
| CVE-2023-23155 | CRITICO9.8 | Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the username parameter in the Admin Login. | 27/02/2023 |
| CVE-2023-23163 | CRITICO9.8 | Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter. | 10/02/2023 |
| CVE-2023-23162 | CRITICO9.8 | Art Gallery Management System Project v1.0 was discovered to contain a SQL injection vulnerability via the cid parameter at product.php. | 10/02/2023 |
| CVE-2023-23161 | MEDIO6.1 | A reflected cross-site scripting (XSS) vulnerability in Art Gallery Management System Project v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the artname parameter under ART TYPE option in the navigation bar. | 10/02/2023 |
| CVE-2023-0563 | MEDIO4.8 | A vulnerability classified as problematic has been found in PHPGurukul Bank Locker Management System 1.0. This affects an unknown part of the file add-locker-form.php of the component Assign Locker. The manipulation of the argument ahname leads to cross site scripting. It is possible to initiate the attack remotely. Th | 28/01/2023 |
| CVE-2023-0562 | CRITICO9.8 | A vulnerability was found in PHPGurukul Bank Locker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php of the component Login. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The exploit | 28/01/2023 |
| CVE-2022-46128 | MEDIO6.1 | phpgurukul Doctor Appointment Management System V 1.0.0 is vulnerable to Cross Site Scripting (XSS) via searchdata=. | 26/01/2023 |
| CVE-2022-45730 | MEDIO6.1 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search function. | 26/01/2023 |
| CVE-2022-47102 | MEDIO5.4 | A cross-site scripting (XSS) vulnerability in Student Study Center Management System V 1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter. | 12/01/2023 |
| CVE-2022-45729 | MEDIO6.1 | A cross-site scripting (XSS) vulnerability in Doctor Appointment Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee ID parameter. | 12/01/2023 |
| CVE-2022-45728 | MEDIO6.1 | Doctor Appointment Management System v1.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability. | 12/01/2023 |
| CVE-2022-43369 | MEDIO6.1 | AutoTaxi Stand Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component search.php. | 06/12/2022 |
| CVE-2022-40470 | MEDIO4.8 | Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature. | 21/11/2022 |
| CVE-2021-37782 | CRITICO9.8 | Employee Record Management System v 1.2 is vulnerable to SQL Injection via editempprofile.php. | 28/10/2022 |
| CVE-2021-37781 | MEDIO5.4 | Employee Record Management System v 1.2 is vulnerable to Cross Site Scripting (XSS) via editempprofile.php. | 28/10/2022 |
| CVE-2021-35388 | MEDIO5.4 | Hospital Management System v 4.0 is vulnerable to Cross Site Scripting (XSS) via /hospital/hms/admin/patient-search.php. | 28/10/2022 |