Mayurik
Products
37- 38 CVEs
- 38 CVEs
- 35 CVEs
- 29 CVEs
- 26 CVEs
- 20 CVEs
- 16 CVEs
- 14 CVEs
- 13 CVEs
- 12 CVEs
- 11 CVEs
- 10 CVEs
- 10 CVEs
- 8 CVEs
- 7 CVEs
- 6 CVEs
- 6 CVEs
- 6 CVEs
- 5 CVEs
- 3 CVEs
- 3 CVEs
- 3 CVEs
- 3 CVEs
- 2 CVEs
- 2 CVEs
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- View all 37 products →
Recent CVEs
338| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-27747 | Cri | 0.69 | 9.8 | 0.24 | Mar 1, 2024 | File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component. | ||
| CVE-2024-27746 | Cri | 0.68 | 9.8 | 0.13 | Mar 1, 2024 | SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component. | ||
| CVE-2023-44755 | Cri | 0.64 | 9.8 | 0.01 | Apr 22, 2025 | Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php. | ||
| CVE-2025-1875 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php. | ||
| CVE-2025-1874 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php. | ||
| CVE-2025-1873 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php. | ||
| CVE-2025-1872 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php. | ||
| CVE-2025-1871 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php. | ||
| CVE-2025-1870 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php. | ||
| CVE-2025-1869 | Cri | 0.64 | 9.8 | 0.00 | Mar 3, 2025 | SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php. | ||
| CVE-2024-48581 | Cri | 0.64 | 9.8 | 0.01 | Oct 25, 2024 | File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component. | ||
| CVE-2024-48580 | Cri | 0.64 | 9.8 | 0.01 | Oct 25, 2024 | SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request. | ||
| CVE-2024-48579 | Cri | 0.64 | 9.8 | 0.01 | Oct 25, 2024 | SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request. | ||
| CVE-2024-48411 | Cri | 0.64 | 9.8 | 0.01 | Oct 15, 2024 | itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php. | ||
| CVE-2024-46377 | Cri | 0.64 | 9.8 | 0.01 | Sep 18, 2024 | Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php. | ||
| CVE-2024-46376 | Cri | 0.64 | 9.8 | 0.01 | Sep 18, 2024 | Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php. | ||
| CVE-2024-46375 | Cri | 0.64 | 9.8 | 0.01 | Sep 18, 2024 | Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php. | ||
| CVE-2024-46374 | Cri | 0.64 | 9.8 | 0.00 | Sep 18, 2024 | Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php. | ||
| CVE-2024-44430 | Cri | 0.64 | 9.8 | 0.01 | Sep 13, 2024 | SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/control/register_case.php interface | ||
| CVE-2024-36568 | Cri | 0.64 | 9.8 | 0.01 | Jun 3, 2024 | Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=. |
- risk 0.69cvss 9.8epss 0.24
File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email Image parameter in the profile.php component.
- risk 0.68cvss 9.8epss 0.13
SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the email address parameter in the index.php component.
- risk 0.64cvss 9.8epss 0.01
Sacco Management system v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /sacco/ajax.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "searchtitle" parameter in search.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "description" parameter in admin/add-category.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagetitle" and "pagedescription" parameters in admin/contactus.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "category" and "subcategory" parameters in admin/add-subcategory.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "pagedescription" parameter in admin/aboutus.php.
- risk 0.64cvss 9.8epss 0.00
SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/check_avalability.php.
- risk 0.64cvss 9.8epss 0.01
File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_class.php component.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email parameter of the login request.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code via the username parameter of the login request.
- risk 0.64cvss 9.8epss 0.01
itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to SQL Injection (SQLI) via a crafted payload to the val-email parameter in forget_password.php.
- risk 0.64cvss 9.8epss 0.01
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/admin_class.php.
- risk 0.64cvss 9.8epss 0.01
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/admin_class.php.
- risk 0.64cvss 9.8epss 0.01
Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_class.php.
- risk 0.64cvss 9.8epss 0.00
Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.
- risk 0.64cvss 9.8epss 0.01
SQL Injection vulnerability in Best Free Law Office Management Software-v1.0 allows an attacker to execute arbitrary code and obtain sensitive information via a crafted payload to the kortex_lite/control/register_case.php interface
- risk 0.64cvss 9.8epss 0.01
Sourcecodester Gas Agency Management System v1.0 is vulnerable to SQL Injection via /gasmark/editbrand.php?id=.