Skip to content
OpenAdvisories

Archive

17 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /17 October 2023 →
  1. 180
  2. 210
  3. 326
  4. 4153
  5. 5123
  6. 6162
  7. 767
  8. 854
  9. 915
  10. 1011
  11. 11118
  12. 12157
  13. 1360
  14. 1467
  15. 1579
  16. 169
  17. 1718
  18. 1855
  19. 1956
  20. 20127
  21. 2158
  22. 2241
  23. 233
  24. 248
  25. 2593
  26. 26166
  27. 27146
  28. 2873
  29. 2983
  30. 3056
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 5.5
    CVE-2023-5030

    Tongda OA delete.php sql injection

    A vulnerability has been found in Tongda OA up to 11.10 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/plan/delete.php. The manipulation of the argument PLAN_ID leads to sql injection. The exploit has been d…

    Tongda OA
  • Medium 5.5
    CVE-2023-5029

    mccms 1 sql injection

    A vulnerability, which was classified as critical, was found in mccms 2.6. This affects an unknown part of the file /category/order/hits/copyright/46/finish/1/list/1. The manipulation with the input '"1 leads to sql injection. The exploit has been disclosed t…

  • Medium 6.3
    CVE-2023-5027

    SourceCodester Simple Membership System club_validator.php sql injection

    A vulnerability classified as critical was found in SourceCodester Simple Membership System 1.0. Affected by this vulnerability is an unknown functionality of the file club_validator.php. The manipulation of the argument club leads to sql injection. The attac…

    SourceCodester Simple Membership System
  • Medium 5.5
    CVE-2023-5023

    Tongda OA delete.php sql injection

    A vulnerability was found in Tongda OA 2017 and classified as critical. Affected by this issue is some unknown functionality of the file general/hr/manage/staff_relatives/delete.php. The manipulation of the argument RELATIVES_ID leads to sql injection. The ex…

    Tongda OA
  • Medium 5.5
    CVE-2023-5022

    DedeCMS select_templets_post.php absolute path traversal

    A vulnerability has been found in DedeCMS up to 5.7.100 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /include/dialog/select_templets_post.php. The manipulation of the argument activepath leads to absolute …

  • Medium 6.3
    CVE-2023-5019

    Tongda OA delete.php sql injection

    A vulnerability classified as critical was found in Tongda OA. This vulnerability affects unknown code of the file general/hr/manage/staff_reinstatement/delete.php. The manipulation of the argument REINSTATEMENT_ID leads to sql injection. The attack can be in…

    Tongda OA
  • Medium 6.3
    CVE-2023-5018

    SourceCodester Lost and Found Information System POST Parameter sql injection

    A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=save_category of the component POST Parameter Handler. The manipulation of the argume…

    SourceCodester Lost and Found Information System
  • Medium 5.5
    CVE-2023-5017

    lmxcms admin.php sql injection

    A vulnerability was found in lmxcms up to 1.41. It has been rated as critical. Affected by this issue is some unknown functionality of the file admin.php. The manipulation of the argument lid leads to sql injection. VDB-239858 is the identifier assigned to th…

  • Medium 6.3
    CVE-2023-5016

    spider-flow API DataSourceController.java DriverManager.getConnection deserialization

    A vulnerability was found in spider-flow up to 0.5.0. It has been declared as critical. Affected by this vulnerability is the function DriverManager.getConnection of the file src/main/java/org/spiderflow/controller/DataSourceController.java of the component A…

  • Medium 6.3
    CVE-2023-5014

    Sakshi2610 Food Ordering Website categoryfood.php sql injection

    A vulnerability was found in Sakshi2610 Food Ordering Website 1.0 and classified as critical. This issue affects some unknown processing of the file categoryfood.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remo…

    Sakshi2610 Food Ordering Website