Lucene search
+L

471 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/28 12:00 a.m.•4 views

CVE-2023-5836: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file classes/Users.php?f=delete. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The...

9.8CVSS6.6AI score0.00418EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/07 12:00 a.m.•2 views

CVE-2023-3145: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in SourceCodester Online Discussion Forum Site 1.0. Affected by this issue is some unknown functionality of the file classes\Users.php?f=registration. The manipulation of the argument username leads to sql injection. The attack may...

8.8CVSS6.6AI score0.00781EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/16 12:00 a.m.•2 views

CVE-2023-31857: Unrestricted Upload of File with Dangerous Type

Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...

9.8CVSS6.2AI score0.01519EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/05/16 12:00 a.m.•12 views

Online Computer and Laptop Store 代码问题漏洞

Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...

9.8CVSS8.1AI score0.01519EPSS
SaveExploits1References2
OSV
OSV
•added 2023/04/27 4:15 p.m.•16 views

CVE-2023-2350

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...

5.4CVSS3.8AI score0.00564EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/27 12:00 a.m.•2 views

CVE-2023-2350: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched...

5.4CVSS3.9AI score0.00564EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/04/27 12:00 a.m.•13 views

PT-2023-18992 · Sourcecodester · Sourcecodester Service Provider Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Service Provider Management System version 1.0 Description: A problematic vulnerability was found in the SourceCodester Service Provider Management System, affecting an unknown functionality of the file /classes/Users.php. The...

5.4CVSS4.3AI score0.00564EPSS
SaveExploits1References7
CNVD
CNVD
•added 2023/04/24 12:00 a.m.•17 views

Task Reminder System Cross-Site Scripting Vulnerability

Task Reminder System is a task reminder system. A cross-site scripting vulnerability exists in Task Reminder System version 1.0, which stems from a cross-site scripting XSS vulnerability in the parameter id of the file Users.php. No details of the vulnerability are available at this time...

6.1CVSS5.7AI score0.00507EPSS
SaveExploits0References1
OSV
OSV
•added 2023/04/21 11:15 a.m.•14 views

CVE-2023-2219

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has...

6.1CVSS3.8AI score0.00507EPSS
SaveExploits0References3
Prion
Prion
•added 2023/04/21 11:15 a.m.•29 views

Cross site scripting

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

4CVSS6AI score0.00649EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2023/04/21 10:31 a.m.•43 views

CVE-2023-2216 Campcodes Coffee Shop POS System Users.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

4CVSS6.2AI score0.00649EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/21 12:00 a.m.•4 views

CVE-2023-2216: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php. The manipulation of the argument firstname leads to cross site scripting. The attack can be launched remotely. Th...

6.1CVSS3.9AI score0.00649EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/21 12:00 a.m.•2 views

CVE-2023-2219: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. The attack may be initiated remotely. The exploit has...

6.1CVSS3.9AI score0.00507EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/04/15 12:00 p.m.•53 views

CVE-2023-2099 SourceCodester Vehicle Service Management System Users.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS6.2AI score0.00652EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/15 12:00 a.m.•24 views

PT-2023-17778 · Sourcecodester · Sourcecodester Vehicle Service Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Service Management System version 1.0 Description: A problematic vulnerability has been found in the SourceCodester Vehicle Service Management System. This issue affects an unknown part of the file /classes/Users.php. T...

6.1CVSS4.3AI score0.00652EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/15 12:00 a.m.•2 views

CVE-2023-2099: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /classes/Users.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The...

6.1CVSS4AI score0.00652EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2023/04/15 12:00 a.m.•14 views

Sourcecodester Vehicle Service Management System 跨站脚本漏洞

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple web application for automotive repair/service stores or businesses. A cross-site scripting vulnerability exists in SourceCodester Vehicle Service Management System version 1.0, which originates from an unknow...

6.1CVSS4.6AI score0.00652EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•38 views

PT-2023-17624 · Campcodes · Campcodes Online Traffic Offense Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Traffic Offense Management System version 1.0 Description: A problematic vulnerability was found in the system, affecting unknown code of the file /classes/Users.php. The manipulation of the id argument leads to cross-site...

6.1CVSS4.5AI score0.00644EPSS
SaveExploits1References7
zdt
zdt
•added 2023/04/06 12:00 a.m.•261 views

Music Gallery Site v1.0 - Broken Access Control Vulnerability

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows 11 Broken...

9.8CVSS9.4AI score0.0467EPSS
SaveExploits5
Exploit DB
Exploit DB
•added 2023/04/06 12:00 a.m.•302 views

Music Gallery Site v1.0 - Broken Access Control

Exploit Title: Music Gallery Site v1.0 - Broken Access Control Exploit Author: Muhammad Navaid Zafar Ansari Date: 21 February 2023 CVE Assigned: CVE-2023-0963 mitre.org nvd.nist.org Vendor Homepage: https://www.sourcecodester.com Software Link: Music Gallery Site Version: v 1.0 Tested on: Windows...

9.8CVSS7.4AI score0.0467EPSS
SaveExploits5
Rows per page
Query Builder