Skip to content
Noroxi

mayurik records

283 published records for vendor mayurik.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
15
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24
  3. 25
  4. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

283 records
  • CVE-2024-27747
    46Plan

    File Upload vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to the

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    mayurik · petrol pump managementMar 1, 2024

  • CVE-2024-27746
    43Plan

    SQL Injection vulnerability in Petrol Pump Mangement Software v.1.0 allows an attacker to execute arbitrary code via a crafted payload to th

    CriticalCVSS 9.8Proof of conceptEPSS 13%

    mayurik · petrol pump managementMar 1, 2024

  • CVE-2023-46980
    39Monitor

    An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted sc

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    mayurik · best courier management systemNov 3, 2023

  • CVE-2024-28556
    39Monitor

    SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate p

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · php task management systemApr 15, 2024

  • CVE-2024-28557
    39Monitor

    SQL Injection vulnerability in Sourcecodester php task management system v1.0, allows remote attackers to execute arbitrary code, escalate p

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · php task management systemApr 15, 2024

  • CVE-2024-46377
    39Monitor

    Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the save_settings() function of the file rental/a

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    mayurik · best house rental management systemSep 18, 2024

  • CVE-2023-4181
    39Monitor

    SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · free hospital management system for small practicesAug 6, 2023

  • CVE-2023-48823
    39Monitor

    A Blind SQL injection issue in ajax.php in GaatiTrack Courier Management System 1.0 allows an unauthenticated attacker to inject a payload v

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · courier management systemDec 7, 2023

  • CVE-2024-48581
    39Monitor

    File Upload vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the admin_cl

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best courier management systemOct 25, 2024

  • CVE-2024-46375
    39Monitor

    Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the file rental/admin_cl

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best house rental management systemSep 18, 2024

  • CVE-2024-46376
    39Monitor

    Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function of the file rental/

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best house rental management systemSep 18, 2024

  • CVE-2023-4749
    39Monitor

    SourceCodester Inventory Management System index.php file inclusion

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · inventory management systemSep 3, 2023

  • CVE-2023-4180
    39Monitor

    SourceCodester Free Hospital Management System for Small Practices login.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · free hospital management system for small practicesAug 6, 2023

  • CVE-2024-29303
    39Monitor

    The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · php task management systemMar 25, 2024

  • CVE-2024-48579
    39Monitor

    SQL Injection vulnerability in Best House rental management system project in php v.1.0 allows a remote attacker to execute arbitrary code v

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best house rental management systemOct 25, 2024

  • CVE-2024-48580
    39Monitor

    SQL Injection vulnerability in Best courier management system in php v.1.0 allows a remote attacker to execute arbitrary code via the email

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best courier management systemOct 25, 2024

  • CVE-2023-4179
    39Monitor

    SourceCodester Free Hospital Management System for Small Practices sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · free hospital management system for small practicesAug 6, 2023

  • CVE-2023-3617
    39Monitor

    SourceCodester Best POS Management System Login Page admin_class.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best pos management systemJul 11, 2023

  • CVE-2023-1962
    39Monitor

    SourceCodester Best Online News Portal POST Parameter forgot-password.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best online news portalApr 9, 2023

  • CVE-2023-0784
    39Monitor

    SourceCodester Best Online News Portal Login Page sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best online news portalFeb 12, 2023

  • CVE-2023-6305
    39Monitor

    SourceCodester Free and Open Source Inventory Management System suppliar_data.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · free and open source inventory management systemNov 26, 2023

  • CVE-2023-6306
    39Monitor

    SourceCodester Free and Open Source Inventory Management System member_data.php sql injection

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · free and open source inventory management systemNov 26, 2023

  • CVE-2023-27202
    39Monitor

    Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best pos management systemMar 9, 2023

  • CVE-2023-27205
    39Monitor

    Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best pos management systemMar 9, 2023

  • CVE-2023-27204
    39Monitor

    Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    mayurik · best pos management systemMar 9, 2023