Lucene search
+L

73 matches found

Positive Technologies
Positive Technologies
added 2024/12/04 12:0 a.m.11 views

PT-2024-17474 · Dedecms · Dedecms

Name of the Vulnerable Software and Affected Versions: DedeCMS version 5.7.116 Description: A problematic issue has been found in DedeCMS, affecting some unknown functionality of the file /member/soft add.php. The manipulation of the argument body leads to cross site scripting. The attack may be...

5.4CVSS4.1AI score0.00402EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2024/11/26 12:0 a.m.10 views

Code-Projects Crud Operation System 安全漏洞

Code-Projects Crud Operation System is an open source application from Code-Projects. A security vulnerability exists in Code-Projects Crud Operation System version 1.0, which originates from a cross-site scripting vulnerability contained in the saddress parameter of the /add.php file...

5.4CVSS4.5AI score0.00376EPSS
SaveExploits1References1
OSV
OSV
added 2024/11/12 6:15 p.m.8 views

CVE-2024-11138

A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlinkadd.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been...

9.8CVSS5AI score0.02476EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/10/27 12:0 a.m.8 views

PT-2024-16267 · Unknown · Sourcecodester Attendance/Payroll System

Name of the Vulnerable Software and Affected Versions: SourceCodester Attendance and Payroll System version 1.0 Description: A critical issue has been found in the system, affecting the processing of the file /admin/overtime add.php. The manipulation of the id argument leads to SQL injection. The...

9.8CVSS7.1AI score0.00436EPSS
SaveExploits0References8
OSV
OSV
added 2024/10/10 5:15 p.m.7 views

CVE-2024-9799

A vulnerability has been found in SourceCodester Profile Registration without Reload Refresh 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file add.php. The manipulation of the argument...

6.1CVSS3.8AI score0.00429EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2024/10/10 12:0 a.m.6 views

SourceCodester Profile Registration without Reload Refresh 跨站脚本漏洞

SourceCodester Profile Registration without Reload Refresh is a SourceCodester open source application. A cross-site scripting vulnerability exists in SourceCodester Profile Registration without Reload Refresh version 1.0, which originates in the file add.php with the parameters...

6.1CVSS4.3AI score0.00429EPSS
SaveExploits1References6
OSV
OSV
added 2024/09/20 4:15 p.m.4 views

CVE-2024-9036

A vulnerability was found in itsourcecode Online Bookstore 1.0. It has been rated as critical. This issue affects some unknown processing of the file adminadd.php. The manipulation of the argument image leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

5.3CVSS6.3AI score0.00507EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/12 1:38 p.m.9 views

CVE-2024-7660

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

6.1CVSS3.6AI score0.00517EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/08/12 12:0 a.m.10 views

SourceCodester File Manager 安全漏洞

SourceCodester File Manager is a file manager. A security vulnerability exists in SourceCodester File Manager version 1.0, which stems from a cross-site scripting vulnerability in the File Title/Uploaded By parameter of the Add File Handler component...

6.1CVSS4.6AI score0.00517EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/11 3:0 a.m.19 views

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

5.3CVSS6.2AI score0.00517EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/08/11 3:0 a.m.32 views

CVE-2024-7660 SourceCodester File Manager App Add File cross site scripting

A vulnerability has been found in SourceCodester File Manager App 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Add File Handler. The manipulation of the argument File Title/Uploaded By leads to cross site scripting. The attack can ...

5.3CVSS0.00517EPSS
SaveExploits1References4
CVE
CVE
added 2024/08/11 3:0 a.m.73 views

CVE-2024-7660

SourceCodester File Manager App 1.0 contains a cross‑site scripting vulnerability in the Add File Handler. Manipulating the File Title/Uploaded By parameter can trigger XSS, with remote exploitation and a publicly disclosed exploit. Connected advisories do not specify the exact XSS type (reflecte...

6.1CVSS3.8AI score0.00517EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2024/08/11 12:0 a.m.17 views

PT-2024-38488 · Unknown · Sourcecodester File Manager App

Name of the Vulnerable Software and Affected Versions: SourceCodester File Manager App version 1.0 Description: A vulnerability has been found in the SourceCodester File Manager App, affecting an unknown functionality of the component Add File Handler. The manipulation of the argument File...

6.1CVSS4.3AI score0.00517EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/04/07 12:0 a.m.10 views

PT-2024-25828 · Sourcecodester · Sourcecodester Prison Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Prison Management System version 1.0 Description: A critical issue affects the Avatar Handler component, specifically the file /Admin/add-admin.php. The manipulation of the avatar argument leads to unrestricted upload. This iss...

7.5CVSS7.4AI score0.01063EPSS
SaveExploits1References8
OSV
OSV
added 2024/02/23 4:15 p.m.7 views

CVE-2024-1821

A vulnerability was found in code-projects Crime Reporting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file policeadd.php. The manipulation of the argument policename/policeid/policespec/password leads to sql injection. The exploit has been disclos...

8.8CVSS5.6AI score0.00537EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/02/06 12:0 a.m.11 views

PT-2024-17691 · Unknown · Codeastro University Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro University Management System version 1.0 Description: A problematic vulnerability has been found in the Attendance Management component, specifically in the file /att add.php. The manipulation of the Student Name argument leads to...

4.8CVSS6.4AI score0.00485EPSS
SaveExploits1References7
OSV
OSV
added 2023/12/30 4:15 p.m.9 views

CVE-2023-7177

A vulnerability classified as critical was found in Campcodes Online College Library System 1.0. This vulnerability affects unknown code of the file /admin/bookadd.php of the component HTTP POST Request Handler. The manipulation of the argument category leads to sql injection. The attack can be...

8.8CVSS5.8AI score0.00733EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2023/11/17 12:15 a.m.10 views

CVE-2023-48078

SQL Injection vulnerability in add.php in Simple CRUD Functionality v1.0 allows attackers to run arbitrary SQL commands via the 'title' parameter...

9.8CVSS6.1AI score0.00776EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/11/13 12:0 a.m.8 views

DedeCMS Security Vulnerability

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has content publishing, content management, content editing and content retrieval functions. A security vulnerability exists in...

5.4CVSS5.8AI score0.00409EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/10/26 12:0 a.m.9 views

SourceCodester File Manager Code Issue Vulnerability

SourceCodester File Manager is a file manager. A security vulnerability exists in SourceCodester File Manager version 1.0, which originates from a file upload vulnerability in the parameter uploadedFileName of the file endpoint/add-file.php...

9.8CVSS7AI score0.0078EPSS
SaveExploits1References4
Rows per page
Query Builder