CVE 検索
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
公開されているすべての CVE とオープンソースのセキュリティアドバイザリ（NVD、OSV、GitHub）を、CVSS、EPSS、実際に悪用されているか（CISA KEV）とともに掲載しています。数時間ごとに更新されます。スキャンでは、検出した技術とこれらを照合します。
| 28/09/2023 |
| CVE-2023-43014 | 高8.8 | Asset Management System v1.0 is vulnerable to
an Authenticated SQL Injection vulnerability
on the 'first_name' and 'last_name' parameters
of user.php page, allowing an authenticated
attacker to dump all the contents of the database
contents.
| 28/09/2023 |
| CVE-2023-5185 | 高8.8 | Gym Management System Project v1.0 is vulnerable to
an Insecure File Upload vulnerability on the 'file'
parameter of profile/i.php page, allowing an
authenticated attacker to obtain Remote Code Execution
on the server hosting the application.
| 28/09/2023 |
| CVE-2023-5053 | 緊急9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-5004 | 緊急9.8 | Hospital management system version 378c157 allows to bypass authentication.
This is possible because the application is vulnerable to SQLI.
| 28/09/2023 |
| CVE-2023-44173 | 中5.4 | Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.
| 28/09/2023 |
| CVE-2023-43740 | 高8.8 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of
admin_edit.php page, allowing an authenticated attacker to obtain Remote Code Execution on the server hosting
the application.
| 28/09/2023 |
| CVE-2023-43013 | 緊急9.8 | Asset Management System v1.0 is vulnerable to an
unauthenticated SQL Injection vulnerability on the
'email' parameter of index.php page, allowing an
external attacker to dump all the contents of the
database contents and bypass the login control.
| 28/09/2023 |
| CVE-2023-43144 | 緊急9.8 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. | 22/09/2023 |
| CVE-2022-42066 | 中6.1 | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. | 14/10/2022 |
| CVE-2021-45852 | 中5.3 | An issue was discovered in Projectworlds Hospital Management System v1.0. Unauthorized malicious attackers can add patients without restriction via add_patient.php. | 16/03/2022 |
| CVE-2021-44866 | 高7.5 | An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database. | 03/02/2022 |
| CVE-2021-46024 | 緊急9.8 | Projectworlds online-shopping-webvsite-in-php 1.0 suffers from a SQL Injection vulnerability via the "id" parameter in cart_add.php, No login is required. | 23/01/2022 |
| CVE-2021-46307 | 緊急9.8 | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. | 21/01/2022 |
| CVE-2021-43631 | 緊急9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via the appointment_no parameter in payment.php. | 22/12/2021 |
| CVE-2021-43630 | 高8.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in add_patient.php. As a result, an authenticated malicious user can compromise the databases system and in some cases leverage this vulnerability to get remote code execution on the remote web server. | 22/12/2021 |
| CVE-2021-43629 | 緊急9.8 | Projectworlds Hospital Management System v1.0 is vulnerable to SQL injection via multiple parameters in admin_home.php. | 22/12/2021 |