Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior

Críticas / altas1383▼ 38 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior

31 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2024-33962	Analizada	Alta (7.5)	0.45%	—	Janobe Credit Card Janobe Debit Card Payment Janobe Paypal Janobe School Attendence Monitoring System+1	6/8/2024	17/6/2026	SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/index.php' parameter.
CVE-2024-33961	Analizada	Alta (7.5)	0.45%	—	Janobe Credit Card Janobe Debit Card Payment Janobe Paypal Janobe School Attendence Monitoring System+1	6/8/2024	17/6/2026	SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in '/admin/mod_reservation/controller.php'…
CVE-2024-33959	Analizada	Alta (7.5)	0.41%	—	Janobe Credit Card Janobe Debit Card Payment Janobe Paypal Janobe School Attendence Monitoring System+1	6/8/2024	17/6/2026	SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'categ' in '/admin/mod_reports/printreport.php' parameter.
CVE-2018-18795	Modificada	Crítica (9.8)	3.2%	💥 Exploit	School Event Management System Project School Event Management System	16/11/2018	17/6/2026	School Event Management System 1.0 has SQL Injection via the student/index.php or event/index.php id parameter.
CVE-2018-18794	Modificada	Alta (8.8)	2.4%	💥 Exploit	School Event Management System Project School Event Management System	16/11/2018	17/6/2026	School Event Management System 1.0 allows CSRF via user/controller.php?action=edit.
CVE-2018-18793	Modificada	Crítica (9.8)	9.5%	💥 Exploit	School Event Management System Project School Event Management System	16/11/2018	17/6/2026	School Event Management System 1.0 allows Arbitrary File Upload via event/controller.php?action=photos.