CVE-2023-1481 SourceCodester Monitoring of Students Cyber Accounts System POST Parameter cross site scripting

A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue is some unknown functionality of the file modules/balance/index.php?view=balancelist of the component POST Parameter Handler. The...

CVE-2023-1481

CVE-2023-1481 affects SourceCodester Monitoring of Students Cyber Accounts System v1.0. A cross-site scripting vulnerability exists in modules/balance/index.php?view=balancelist, caused by manipulation of the POST parameter id with input such as >. It can be exploited remotely; exploit has bee...

CVE-2023-1480 SourceCodester Monitoring of Students Cyber Accounts System POST Parameter login.php sql injection

A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unknown functionality of the file login.php of the component POST Parameter Handler. The manipulation of the argument un leads to sql injection...

CVE-2023-1480

CVE-2023-1480 affects SourceCodester Monitoring of Students Cyber Accounts System v1.0, specifically the login.php file in the POST Parameter Handler. The vulnerability arises from manipulation of the un parameter, which leads to SQL injection. This issue can be exploited remotely; public exploit...

SourceCodester Monitoring of Students Cyber Accounts System 跨站脚本漏洞

Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A cross-site scripting vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from an issue with the file...

Monitoring of Students Cyber Accounts System SQL注入漏洞

Monitoring of Students Cyber Accounts System is a Monitoring of Students Cyber Accounts System by Chris Jim Egot Individual Developer. A SQL injection vulnerability exists in SourceCodester Monitoring of Students Cyber Accounts System version 1.0, which stems from a problem with the file login.ph...

PT-2023-17017 · Unknown · Sourcecodester Monitoring Of Students Cyber Accounts System

Name of the Vulnerable Software and Affected Versions: SourceCodester Monitoring of Students Cyber Accounts System version 1.0 Description: A critical issue was found in the file login.php of the component POST Parameter Handler. The manipulation of the un argument leads to SQL injection. The...

Timing Attack

ezsystems and ibexa/core are vulnerable to Timing Attacks. The vulnerability exists because the library uses random execution time to hinder timing attacks against user accounts which allows a remote attacker to discover whether a given account exists in a system without knowing its password,...

CVE-2023-23412

Windows Accounts Picture Elevation of Privilege Vulnerability...

CVE-2023-23412

Windows Accounts Picture Elevation of Privilege Vulnerability...

CVE-2023-23412

Windows Accounts Picture Elevation of Privilege Vulnerability...

CVE-2023-23412

CVE-2023-23412 is a Windows local elevation-of-privilege issue (Attack Vector: LOCAL, Privileges Required: LOW, UI: NONE) with HIGH impact on confidentiality, integrity, and availability per CVSS 3.1 metrics. Microsoft security updates released March 14, 2023 (e.g., KB5023705, KB5023764, KB502376...

CVE-2023-23412 Windows Accounts Picture Elevation of Privilege Vulnerability

...

CVE-2023-23412 Windows Accounts Picture Elevation of Privilege Vulnerability

...

CVE-2023-27310

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.2. The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to...

CVE-2023-27310

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V5.2. The client query handler of the affected application fails to check for proper permissions when assigning groups to user accounts. This could allow an authenticated remote attacker to assign administrative groups to...

Windows Accounts Picture Elevation of Privilege Vulnerability

...

PT-2023-1766 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Picture component, allowing an attacker to elevate their privileges. This can affect the system. Recommendation...

Microsoft Windows Accounts Control 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Accounts Control. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

KLA48553 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service, bypass security restrictions. Below is a complete list of...