CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/06/2022 |
| CVE-2022-31348 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=. | 02/06/2022 |
| CVE-2022-31347 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle. | 02/06/2022 |
| CVE-2022-31346 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service. | 02/06/2022 |
| CVE-2022-31345 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=. | 02/06/2022 |
| CVE-2022-31344 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking. | 02/06/2022 |
| CVE-2022-31343 | CRÍTICO9.8 | Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=bookings/view_details&id=. | 02/06/2022 |
| CVE-2022-31342 | MÉDIO6.5 | Online Car Wash Booking System v1.0 is vulnerable to Delete any file via /ocwbs/classes/Master.php?f=delete_img. | 02/06/2022 |
| CVE-2022-29651 | ALTO7.2 | An arbitrary file upload vulnerability in the Select Image function of Online Food Ordering System v1.0 allows attackers to execute arbitrary code via a crafted PHP file. | 25/05/2022 |
| CVE-2022-29650 | CRÍTICO9.8 | Online Food Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the Search parameter at /online-food-order/food-search.php. | 25/05/2022 |
| CVE-2022-30837 | MÉDIO5.4 | Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name. | 24/05/2022 |
| CVE-2022-30053 | CRÍTICO9.8 | In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks. | 17/05/2022 |
| CVE-2022-28026 | CRÍTICO9.8 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=. | 21/04/2022 |
| CVE-2022-28025 | CRÍTICO9.8 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year. | 21/04/2022 |
| CVE-2022-28024 | CRÍTICO9.8 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade. | 21/04/2022 |
| CVE-2022-27304 | CRÍTICO9.8 | Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via the user parameter. | 05/04/2022 |
| CVE-2022-26646 | CRÍTICO9.8 | Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter. | 30/03/2022 |